22 lines
490 B
YAML
22 lines
490 B
YAML
name: Weekly OSV dependency audit
|
|
|
|
on:
|
|
schedule:
|
|
# Runs every Monday. Change the minute to stagger repositories.
|
|
- cron: "17 3 * * 1"
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
dependency-audit:
|
|
runs-on: linux-arm64
|
|
timeout-minutes: 20
|
|
|
|
steps:
|
|
- name: Check out repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Scan dependencies for known vulnerabilities
|
|
uses: docker://ghcr.io/google/osv-scanner:v2
|
|
with:
|
|
args: scan source --recursive .
|