security.yml

name: 🔒 Security Management

on:
  push:
    branches: [main]
    paths:
      - "docs/SECURITY.template.MD"

  pull_request:
    branches: [main]
    paths:
      - "docs/SECURITY.template.MD"

  workflow_dispatch:
    inputs:
      force-update:
        description: "Force security policy update even without changes"
        type: boolean
        default: false

  workflow_call:
    inputs:
      tag-name:
        description: "Tag name that triggered the security policy update"
        type: string
        required: false
        default: ""
      force-update:
        description: "Force security policy update even without changes"
        type: boolean
        required: false
        default: false

permissions:
  contents: write
  pull-requests: write

jobs:
  security-management:
    name: Security Management
    uses: bauer-group/automation-templates/.github/workflows/security-management.yml@main
    with:
      tag-name: ${{ inputs.tag-name || github.ref_name }}
      force-update: ${{ inputs.force-update || false }}
    secrets: inherit