Skip to content

Commit a021e2b

Browse files
msukkariclaude
andcommitted
Add vulnerability scan & triage workflow
Calls the reusable workflow from sourcebot-dev/sourcebot to run daily Trivy, Dependabot, and CodeQL scanning with Claude-powered triage. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 7b98ec3 commit a021e2b

1 file changed

Lines changed: 17 additions & 0 deletions

File tree

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
name: Vulnerability Triage
2+
3+
on:
4+
schedule:
5+
- cron: '0 13 * * *'
6+
workflow_dispatch:
7+
8+
permissions:
9+
contents: read
10+
packages: read
11+
security-events: read
12+
id-token: write
13+
14+
jobs:
15+
triage:
16+
uses: sourcebot-dev/sourcebot/.github/workflows/vulnerability-triage.yml@main
17+
secrets: inherit

0 commit comments

Comments
 (0)