Skip to content
This repository is currently being migrated. It's locked while the migration is in progress.

Adding workflows #63

Merged
merged 2 commits into from
Mar 3, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 26 additions & 0 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
name: CodeQL (Python) - SAST

on:
pull_request:
push:
workflow_dispatch:

jobs:
analyze:
name: Code Scanning - CodeQL
runs-on: ubuntu-latest
timeout-minutes: 25
permissions:
security-events: write
packages: read
actions: read
contents: read
strategy:
fail-fast: false
steps:
- uses: hyperwallet/public-security-workflows/codeql@main
with:
language: python
build-mode: 'none'
timeout-minutes: 25

9 changes: 9 additions & 0 deletions .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
name: CodeQL Dependency Review - SCA

on:
pull_request:
push:

jobs:
dependency-review:
uses: hyperwallet/public-security-workflows/.github/workflows/dependency-review.yml@main
Loading