Skip to content

Merge branch 'chore/bump-standards-pins' #31

Merge branch 'chore/bump-standards-pins'

Merge branch 'chore/bump-standards-pins' #31

Workflow file for this run

# SPDX-License-Identifier: MPL-2.0
#
# Standalone Hypatia security scan (push / PR / weekly). This is NOT a duplicate
# of the `hypatia-scan` job in `static-analysis-gate.yml`: that job exists to
# feed the gitbot-fleet LEARNING pipeline (via `deposit-findings`), whereas this
# workflow is the repo's independent security scan. Same tool, two consumers.
# See .github/workflows/README.adoc.
name: Hypatia Security Scan
on:
push:
branches: [main, master, develop]
pull_request:
branches: [main, master]
schedule:
- cron: '0 0 * * 0'
workflow_dispatch:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
security-events: write
jobs:
scan:
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236

Check failure on line 28 in .github/workflows/hypatia-scan.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/hypatia-scan.yml

Invalid workflow file

error parsing called workflow ".github/workflows/hypatia-scan.yml" -> "hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236" : failed to fetch workflow: workflow was not found.