linea-token-list/.github/workflows/security-code-scanner.yml at main · Consensys/linea-token-list · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
name: MetaMask Security Code Scanner

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main
  workflow_call:
    secrets:
      SECURITY_SCAN_METRICS_TOKEN:
        required: false
      APPSEC_BOT_SLACK_WEBHOOK:
        required: false
  workflow_dispatch:

jobs:
  security-scan:
    uses: MetaMask/action-security-code-scanner/.github/workflows/security-scan.yml@v2
    permissions:
      actions: read
      contents: read
      security-events: write
    with:
      repo: ${{ github.repository }}
      scanner-ref: 'v2'
      paths-ignored: |
        node_modules
        **/node_modules/**
        **/__snapshots__/**
        __snapshots_linux__
        **/__stories__/**
        .storybook/
        **/*.test.ts
        **/*.test.tsx
        **/*.test.js
        **/*.test.jsx
        **/*.spec.ts
        **/*.spec.tsx
        **/*.spec.js
        **/*.spec.jsx
        **/test*/**
        **/e2e/**
        **/tests/**
      languages-config: |
        [
        ]
    secrets:
      project-metrics-token: ${{ secrets.SECURITY_SCAN_METRICS_TOKEN }}
      slack-webhook: ${{ secrets.APPSEC_BOT_SLACK_WEBHOOK }}