summaryrefslogtreecommitdiffhomepage
path: root/.github/workflows/osv-scanner-scheduled.yml
blob: d599678339e5aa9a1fd4af2cc2e5d6721e2a6c27 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
---
name: OSV-Scanner Scheduled Scan

on:
  schedule:
    - cron: "30 7 * * MON-FRI"
  workflow_dispatch:

permissions: {}

jobs:
  scan-scheduled:
    permissions:
      # Require writing security events to upload SARIF file to security tab
      security-events: write
      # Only need to read contents
      contents: read
      actions: read

    # yamllint disable rule:line-length
    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@ab8175fc65a74d8c0308f623b1c617a39bdc34fe"  # v1.9.2 + submodule patch
    with:
      checkout-submodules: false