From 8e21cbec3084edcd452be7978d777158ef787c13 Mon Sep 17 00:00:00 2001 From: kelpabc123 <71921094+kelpabc123@users.noreply.github.com> Date: Tue, 2 Apr 2024 11:53:12 -0700 Subject: [PATCH] Create security-scan.yml --- .github/workflows/security-scan.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/security-scan.yml diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml new file mode 100644 index 0000000..8402062 --- /dev/null +++ b/.github/workflows/security-scan.yml @@ -0,0 +1,17 @@ +name: Security Scan + +on: + pull_request: + push: + branches: + - main + +jobs: + security: + name: OSS Security SAST + uses: Roblox/security-workflows/.github/workflows/oss-security-sast.yaml@main + with: + skip-ossf: true + secrets: + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_KEY }} + ROBLOX_SEMGREP_GHC_POC_APP_TOKEN: ${{ secrets.ROBLOX_SEMGREP_GHC_POC_APP_TOKEN }}