name: Scan GitHub Actions
on:
# Required checks must report for every PR, including source-only changes.
pull_request:
merge_group:
push:
branches:
- main
paths:
- ".github/**"
workflow_dispatch:
schedule:
- cron: "19 7 * * 1"
permissions:
jobs:
scan:
name: Scan GitHub Actions
uses: tempoxyz/gh-actions/.github/workflows/scan-github-actions.yml@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
permissions:
id-token: write
actions: read
contents: read