chore: add reusable security scan workflow

Calls JonKazama-Hellion/security-workflows for Semgrep SAST + Trivy filesystem vulnerability scan. Runs on push to main/master, on every PR, and weekly Monday 06:00 UTC.
2026-05-09 11:28:09 +02:00
parent e594258cf3
commit 9b4557f197
1 changed files with 13 additions and 0 deletions
@@ -0,0 +1,13 @@
 name: Security
 on:
  push:
    branches: [main, master]
  pull_request:
  schedule:
    - cron: '0 6 * * 1'
  workflow_dispatch:
 jobs:
  scan:
    uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main