Hellion-Forge/forge-tool-template
Template
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use combined security-scan reusable workflow
Security / scan (push) Successful in 37s
Details

Browse Source 
The security-workflows repo only ships one combined workflow (security-scan.yml
running semgrep + trivy in parallel), not separate semgrep.yml/trivy.yml.
This commit is contained in:
Jon Kazama
2026-05-09 17:35:09 +02:00
parent 4545eb7e45
commit fc61170180
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/security.yml
+9 -9
View File
@@ -8,13 +8,13 @@ on:
schedule: schedule:
- cron: '0 4 * * 1' # Mondays 04:00 UTC - cron: '0 4 * * 1' # Mondays 04:00 UTC
# Reusable workflows live in JonKazama-Hellion/security-workflows # Reusable workflow lives in JonKazama-Hellion/security-workflows.
# (the security-workflows repo is in the personal account, not in either org). # It runs Semgrep SAST + Trivy filesystem scan in parallel.
# Inputs (all optional): severity, semgrep-config, semgrep-exclude-rules.
jobs: jobs:
semgrep: scan:
uses: JonKazama-Hellion/security-workflows/.gitea/workflows/semgrep.yml@main uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
# If you need to exclude specific rules or paths, drop a .semgrep-exclude.yml # Example overrides if you need them:
# at the repo root. The reusable workflow honors it. # with:
# severity: 'CRITICAL'
trivy: # semgrep-exclude-rules: 'csharp.lang.security.sqli.csharp-sqli'
uses: JonKazama-Hellion/security-workflows/.gitea/workflows/trivy.yml@main