Skip to content

Commit 5b4dd11

Browse files
Revise test reusable workflows for full security scan
Updated workflow name and modified job configurations for a full security scan.
1 parent 01d6bcb commit 5b4dd11

1 file changed

Lines changed: 18 additions & 24 deletions

File tree

Lines changed: 18 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -1,31 +1,25 @@
11
# .github/workflows/test-reusable-workflows.yml
2-
name: Test Reusable Workflows (public)
2+
name: Test Reusable Workflows (full scan public)
33

44
on:
5+
push:
6+
branches: [ main, master ]
57
pull_request:
6-
workflow_dispatch:
8+
schedule:
9+
- cron: '0 2 * * 1' # Weekly on Mondays at 2 AM UTC
710

811
jobs:
9-
sast:
10-
name: Test SAST
11-
uses: checkr/workflows-public/.github/workflows/sast.yml@main
12+
security:
13+
name: Complete Security Scan
14+
permissions:
15+
security-events: write
16+
contents: read
17+
uses: checkr/workflows-public/.github/workflows/security-full.yml@main
1218
with:
13-
product: "Security"
14-
15-
secrets:
16-
name: Test Secrets
17-
uses: checkr/workflows-public/.github/workflows/secrets.yml@main
18-
with:
19-
product: "Security"
20-
21-
dependencies:
22-
name: Test Dependencies
23-
uses: checkr/workflows-public/.github/workflows/dependencies.yml@main
24-
with:
25-
product: "Security"
26-
27-
iac:
28-
name: Test IaC
29-
uses: checkr/workflows-public/.github/workflows/iac.yml@main
30-
with:
31-
product: "Security"
19+
product: 'Checkr Trust'
20+
run-sast: true
21+
run-secrets: true
22+
run-dependencies: true
23+
run-iac: true
24+
secrets:
25+
ARMORCODE_API_KEY: ${{ secrets.CHECKR_GITHUB_SCAN_UPLOAD_ARMORCODE_KEY }}

0 commit comments

Comments
 (0)