added osv-scanner (#57)

MadsRC · May 11, 2024 · 20c7439 · 20c7439
1 parent 467ec23
commit 20c7439
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 0 deletions.
diff --git a/.github/workflows/osv-scanner-pr.yaml b/.github/workflows/osv-scanner-pr.yaml
@@ -0,0 +1,17 @@
+name: OSV-Scanner PR Scan
+
+on:
+  pull_request:
+    branches: [main]
+  merge_group:
+    branches: [main]
+
+permissions:
+  # Require writing security events to upload SARIF file to security tab
+  security-events: write
+  # Only need to read contents
+  contents: read
+
+jobs:
+  scan-pr:
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@75532bf0bf75464b047d80414dbce04449498365" # v1.7.3
diff --git a/.github/workflows/osv-scanner-schedule.yaml b/.github/workflows/osv-scanner-schedule.yaml
@@ -0,0 +1,17 @@
+name: OSV-Scanner Scheduled Scan
+
+on:
+  schedule:
+    - cron: "37 2 * * 5"
+  push:
+    branches: [main]
+
+permissions:
+  # Require writing security events to upload SARIF file to security tab
+  security-events: write
+  # Only need to read contents
+  contents: read
+
+jobs:
+  scan-scheduled:
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@75532bf0bf75464b047d80414dbce04449498365" # v1.7.3