diff --git a/.github/workflows/security.code-scanning.yml b/.github/workflows/security.code-scanning.yml new file mode 100644 index 0000000..3bf856b --- /dev/null +++ b/.github/workflows/security.code-scanning.yml @@ -0,0 +1,12 @@ +name: CodeQL + +on: + pull_request: + branches: [ main ] + push: + branches: [ main ] + workflow_dispatch: + +jobs: + codeql-javascript: + uses: chargehound/security-workflows-public/.github/workflows/codeql-javascript.yml@main \ No newline at end of file diff --git a/.github/workflows/security.dependency-review.yml b/.github/workflows/security.dependency-review.yml new file mode 100644 index 0000000..05e828e --- /dev/null +++ b/.github/workflows/security.dependency-review.yml @@ -0,0 +1,10 @@ +name: Dependency Review + +on: + pull_request: + branches: [ main ] + workflow_dispatch: + +jobs: + dependency-review: + uses: chargehound/security-workflows-public/.github/workflows/dependency-review.yml@main \ No newline at end of file