From 447154a882fa4cb2617f8123c85cc7142be50cc1 Mon Sep 17 00:00:00 2001 From: Murilo Dal Ri Date: Thu, 18 Apr 2024 15:30:28 +0100 Subject: [PATCH] Add security scans https://trello.com/c/tRSORszm/3489-add-security-scans-to-dgu-repos-2 --- .github/workflows/ci.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9ba8e8f5..7fd74907 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -7,6 +7,25 @@ on: pull_request: jobs: + security-analysis: + name: Security Analysis + uses: alphagov/govuk-infrastructure/.github/workflows/brakeman.yml@main + secrets: inherit + permissions: + contents: read + security-events: write + actions: read + + codeql-sast: + name: CodeQL SAST scan + uses: alphagov/govuk-infrastructure/.github/workflows/codeql-analysis.yml@main + permissions: + security-events: write + + dependency-review: + name: Dependency Review scan + uses: alphagov/govuk-infrastructure/.github/workflows/dependency-review.yml@main + test: runs-on: ubuntu-latest services: