From 2801adb568ae455e61e89eaf2785fd010e66781d Mon Sep 17 00:00:00 2001 From: Ike Date: Tue, 9 Jun 2026 15:39:01 +0200 Subject: [PATCH 1/2] chore(security): add gitleaks secret scanning workflow --- .github/workflows/security-scan.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .github/workflows/security-scan.yml diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml new file mode 100644 index 0000000..1dc4546 --- /dev/null +++ b/.github/workflows/security-scan.yml @@ -0,0 +1,8 @@ +name: Secret Scan + +on: + pull_request: + +jobs: + call_secret_scanning: + uses: toptal/actions/.github/workflows/security-scan.yml@v3.6.3 From b4b0ef6914b601a7ca08a4d8ca6a8f3c61e886eb Mon Sep 17 00:00:00 2001 From: Ike Date: Tue, 9 Jun 2026 15:39:02 +0200 Subject: [PATCH 2/2] chore(security): add dependabot with 7-day cooldown --- .github/dependabot.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..77a5524 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,20 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 5 + cooldown: + default-days: 7 + exclude: + - toptal/* + - package-ecosystem: npm + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 5 + cooldown: + default-days: 7 + exclude: + - toptal/*