diff --git a/.github/osv-scanner-scheduled.yml b/.github/osv-scanner-scheduled.yml new file mode 100644 index 0000000..1a11539 --- /dev/null +++ b/.github/osv-scanner-scheduled.yml @@ -0,0 +1,20 @@ +name: OSV-Scanner Scheduled Scan + +on: + schedule: + - cron: "30 5 * * 1" + # Change "main" to your default branch if you use a different name, i.e. "master" + push: + branches: [main] + +permissions: + # Required to upload SARIF file to CodeQL. See: https://github.com/github/codeql-action/issues/2117 + actions: read + # Require writing security events to upload SARIF file to security tab + security-events: write + # Only need to read contents + contents: read + +jobs: + scan-scheduled: + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.2"