chore(deps): bump elgohr/Publish-Docker-Github-Action from d0321869e187cfd3124343ea2b39b1db31f89685 to b4404fc8b52787c59471807ba0731aab9b3a8d42 #1237
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # !!! Important !!! | |
| # any change to this workflow will not take into effect on the same PR and only after, | |
| # because of security implications from target 'pull_request_target' | |
| name: security | |
| on: | |
| pull_request_target: # this is needed to use the API key in a PR | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| jobs: | |
| start-security-scan: | |
| runs-on: ubuntu-latest | |
| environment: scan-security | |
| steps: | |
| - run: echo start security scan # just needs a simple step to better control the follow-up jobs | |
| security: | |
| needs: start-security-scan | |
| uses: ./.github/workflows/security-shared.yml | |
| secrets: inherit |