chore(deps): bump elgohr/Publish-Docker-Github-Action from d0321869e187cfd3124343ea2b39b1db31f89685 to 6aa7c6928f7dee6eaf9a3eef414438ed54b3506b #1241
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # !!! Important !!! | |
| # any change to this workflow will not take into effect on the same PR and only after, | |
| # because of security implications from target 'pull_request_target' | |
| name: security | |
| on: | |
| pull_request_target: # this is needed to use the API key in a PR | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| jobs: | |
| start-security-scan: | |
| runs-on: ubuntu-latest | |
| environment: scan-security | |
| steps: | |
| - run: echo start security scan # just needs a simple step to better control the follow-up jobs | |
| security: | |
| needs: start-security-scan | |
| uses: ./.github/workflows/security-shared.yml | |
| secrets: inherit |