name: Security scan
on:
push:
branches:
pull_request:
branches:
schedule:
- cron: '0 6 * * *'
workflow_dispatch:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
permissions:
contents: read
jobs:
scan:
name: Secrets + CVE
permissions:
contents: read
security-events: write
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@539e9aca37e08abde8d9cefbe13cd98fa62b1b41 # main
secrets: inherit