Skip to content

Commit ea6f587

Browse files
committed
ci: enable security checks on push
Signed-off-by: mramotowski <[email protected]>
1 parent 6ea7623 commit ea6f587

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

.github/workflows/security-checks.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -101,8 +101,8 @@ jobs:
101101
uses: ./.github/workflows/_reusable-security-scan.yaml
102102
with:
103103
# For scheduled runs, use full scan configuration
104-
tools: ${{ github.event_name == 'schedule' && 'bandit,clamav,semgrep,trivy,zizmor' || inputs.tools }}
105-
scan-scope: ${{ github.event_name == 'schedule' && 'all' || inputs.scan-scope }}
106-
severity-level: ${{ github.event_name == 'schedule' && 'LOW' || inputs.severity-level }}
107-
confidence-level: ${{ github.event_name == 'schedule' && 'LOW' || inputs.confidence-level }}
104+
tools: ${{ 'bandit,clamav,semgrep,trivy,zizmor' || inputs.tools }}
105+
scan-scope: ${{ 'all' || inputs.scan-scope }}
106+
severity-level: ${{ 'LOW' || inputs.severity-level }}
107+
confidence-level: ${{ 'LOW' || inputs.confidence-level }}
108108
fail-on-findings: false # reports only

0 commit comments

Comments
 (0)