Skip to content
.github/workflows/security.yml

ci: add security scans via shared templates #1

Sign in to view logs

ci: add security scans via shared templates

ci: add security scans via shared templates #1

Workflow file for this run

.github/workflows/security.yml at dba1c29
name: Security Scans
on:
push:
branches: [main]
pull_request:
branches: [main]
workflow_dispatch:
jobs:
semgrep:
uses: BlueCodeIT/pipeline-security-templates/.github/workflows/semgrep-sast.yml@main

Check failure on line 12 in .github/workflows/security.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/security.yml

Invalid workflow file 

error parsing called workflow
".github/workflows/security.yml"
-> "BlueCodeIT/pipeline-security-templates/.github/workflows/semgrep-sast.yml@main"
: workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
with:
config: 'p/default'
severity: 'WARNING'
fail-on-issues: false # erstmal nur reporten
checkov:
uses: BlueCodeIT/pipeline-security-templates/.github/workflows/checkov-iac.yml@main
with:
framework: 'github_actions,dockerfile' # nur was hier sinn macht
soft-fail: true # erstmal nur reporten