mirror of
https://github.com/Portabase/portabase.git
synced 2026-07-14 11:16:13 +02:00
28 lines
696 B
YAML
28 lines
696 B
YAML
name: Security Checks
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches: [ main ]
|
|
|
|
jobs:
|
|
sca-deps: # Dependency & container scan
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: aquasecurity/trivy-action@0.20.0
|
|
with:
|
|
scan-type: 'fs'
|
|
format: 'table'
|
|
severity: 'CRITICAL,HIGH'
|
|
ignore-unfixed: true
|
|
|
|
|
|
secrets-gitleaks: # Secrets exposure
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # Fetch full history for gitleaks
|
|
- uses: gitleaks/gitleaks-action@v2
|
|
with:
|
|
config-path: .gitleaks.toml # Optional, if you have a custom config |