fluxcd-flux2/.github/workflows/scan.yaml
Stefan Prodan c1b2c7cae8
ci: Refactor CI with fluxcd/gha-workflows
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-09-22 14:01:38 +03:00

18 lines
518 B
YAML

name: scan
on:
workflow_dispatch:
push:
branches: [ 'main', 'release/**' ]
pull_request:
branches: [ 'main', 'release/**' ]
schedule:
- cron: '18 10 * * 3'
jobs:
analyze:
permissions:
contents: read # for reading the repository code.
security-events: write # for uploading the CodeQL analysis results.
uses: fluxcd/gha-workflows/.github/workflows/code-scan.yaml@v0.3.0
secrets:
github-token: ${{ secrets.GITHUB_TOKEN }}
fossa-token: ${{ secrets.FOSSA_TOKEN }}