Skip to content

Commit 90ca86f

Browse files
committed
ci: enable security checks on push
1 parent 6ea7623 commit 90ca86f

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

.github/workflows/security-checks.yaml

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,9 @@ on:
5353
schedule:
5454
# Run security checks every day at 2 AM UTC
5555
- cron: "0 2 * * *"
56+
#DELETE AFTER TESTING
57+
pull_request:
58+
#DELETE AFTER TESTING
5659

5760
workflow_dispatch:
5861
inputs:
@@ -101,8 +104,8 @@ jobs:
101104
uses: ./.github/workflows/_reusable-security-scan.yaml
102105
with:
103106
# For scheduled runs, use full scan configuration
104-
tools: ${{ github.event_name == 'schedule' && 'bandit,clamav,semgrep,trivy,zizmor' || inputs.tools }}
105-
scan-scope: ${{ github.event_name == 'schedule' && 'all' || inputs.scan-scope }}
106-
severity-level: ${{ github.event_name == 'schedule' && 'LOW' || inputs.severity-level }}
107-
confidence-level: ${{ github.event_name == 'schedule' && 'LOW' || inputs.confidence-level }}
107+
tools: ${{ 'bandit,clamav,semgrep,trivy,zizmor' || inputs.tools }}
108+
scan-scope: ${{ 'all' || inputs.scan-scope }}
109+
severity-level: ${{ 'LOW' || inputs.severity-level }}
110+
confidence-level: ${{ 'LOW' || inputs.confidence-level }}
108111
fail-on-findings: false # reports only

0 commit comments

Comments
 (0)