ci: vendor validation scripts and remove remote action pins (#327) #654
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-License-Identifier: MPL-2.0 | |
| name: Security Scan | |
| on: | |
| push: | |
| branches: [main] | |
| schedule: | |
| - cron: '0 0 * * 0' # Weekly on Sunday at midnight | |
| workflow_dispatch: | |
| # Cause-B mitigation (#77): cancel superseded runs so stacked pushes | |
| # to the same ref don't pile up identical jobs in the queue. | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| scan: | |
| uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@38e2d15c9535b3e0bfd86a01f13825ce5adfc482 # main 2026-07-07 (skip dispatch without VERISIMDB_PAT) | |
| secrets: | |
| VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }} |