👷 (workflows): Add security workflows #1

	# Copyright 2024
	#
	# Everyone is permitted to copy, distribute, modify, merge, sell, publish,
	# sublicense or whatever the fuck they want with this software but at their
	# OWN RISK.
	# The author has absolutely no fucking clue what the code in this project
	# does. It might just fucking work or not, there is no third option.
	#
	# IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
	# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
	# DEALINGS IN THE SOFTWARE.
	---
	name: Refresh Trunk cache

	on:
	pull_request: {}
	push:
	branches: [main]
	paths: [.trunk/trunk.yaml]

	# permissions: read-all
	permissions: write-all

	jobs:
	trunk-cache:
	name: Refresh Trunk cache
	runs-on: ubuntu-latest
	# permissions:
	# actions: write

	steps:
	- uses: GitHubSecurityLab/actions-permissions/monitor@e83639073897b68de235d81a783b2221cc13def7
	with:
	config: ${{ vars.GH_MONITOR_CONFIG }}

	- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	- uses: trunk-io/trunk-action@97ecd21fe6c743bf7a606791584b683a7995c70e # v1.1.9
	with:
	check-mode: populate_cache_only

Provide feedback