diff --git a/.github/workflows/security-pipeline.yml b/.github/workflows/security-pipeline.yml new file mode 100644 index 0000000..fab4753 --- /dev/null +++ b/.github/workflows/security-pipeline.yml @@ -0,0 +1,17 @@ +name: Security Checker +run-name: Running Security Checker +on: + workflow_dispatch: + pull_request: + branches: [main] +jobs: + Security-Pipeline: + uses: GradiusX/security-pipeline/.github/workflows/pipeline.yml@main + with: + continue-on-error: false + severity-level: "critical" + secrets-exclusion-list: > + ^\.git/.* + defectdojo-url: ${{ vars.DEFECTDOJO_URL }} + secrets: + defectdojo-api-key: ${{ secrets.DEFECTDOJO_API_KEY }}