Skip to content

Improve annotator Part 1 #1007

Improve annotator Part 1

Improve annotator Part 1 #1007

name: Security Scans on PR
on:
pull_request:
branches:
- develop
- release/**
permissions: {}
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.event.after }}
cancel-in-progress: true
jobs:
zizmor-scan-pr:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout code
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with:
persist-credentials: false
- name: Run Zizmor scan
uses: open-edge-platform/geti-ci/actions/zizmor@a79fb2f70857ef7d2b1b89fdb5632e03f40df0a1
with:
scan-scope: "changed"
severity-level: "MEDIUM"
confidence-level: "LOW"
fail-on-findings: true
bandit-scan-pr:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout code
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with:
persist-credentials: false
- name: Run Bandit scan
uses: open-edge-platform/geti-ci/actions/bandit@a79fb2f70857ef7d2b1b89fdb5632e03f40df0a1
with:
scan-scope: "changed"
severity-level: "LOW"
confidence-level: "LOW"
config_file: ".ci/ipas_default.config"
fail-on-findings: true