diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9fbde43..7a8e4b6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,6 +14,27 @@ on: - '.github/workflows/ci.yml' jobs: + + security: + runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write + steps: + - uses: actions/checkout@v6 + + - name: Run HenKaiPan Security Scan + uses: dyallab/henkaipan-action@v1.4.0 + with: + api-url: https://henkaipan.jonathan.com.ar + api-key: ${{ secrets.HENKAIPAN_API_KEY }} + project-id: ${{ secrets.HENKAIPAN_PROJECT_ID }} + scanners: "semgrep, trivy" + fail-on-severity: high + post-pr-comment: "true" + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + build: permissions: contents: read