refactor: eradicate ReScript and mechanically port to AffineScript (#… #688

	# SPDX-License-Identifier: AGPL-3.0-or-later
	# This workflow is managed by gh actions-lock.

	name: Security Scan

	on:
	push:
	branches: [main]
	schedule:
	- cron: '0 0 * * 0' # Weekly on Sunday at midnight
	workflow_dispatch:

	# Cause-B mitigation (#77): cancel superseded runs so stacked pushes
	# to the same ref don't pile up identical jobs in the queue.
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	scan:
	uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@0d531555f4c04f086f0af58ec34e1bb27145fdbe # main 2026-07-07 (skip dispatch without VERISIMDB_PAT)
Check failure on line 24 in .github/workflows/security-scan.yml View workflow run for this annotation GitHub Actions / .github/workflows/security-scan.yml Invalid workflow file error parsing called workflow ".github/workflows/security-scan.yml" -> "hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@0d531555f4c04f086f0af58ec34e1bb27145fdbe" : Invalid dependency lockfile "hyperpolymath/panic-attack/.github/workflows/actions.lock@0d531555f4c04f086f0af58ec34e1bb27145fdbe": workflow ".github/workflows/scan-and-report.yml" references actions not present in the lockfile: actions/checkout@v4.3.1, dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7, swatinem/rust-cache@v2.8.2 Run 'gh actions-lock' to regenerate the lockfile.
	secrets:
	VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }}

Navigation Menu