Skip to content

Created GHA workflow for sca scan #6117

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 19 commits into
base: master
Choose a base branch
from

Conversation

arnaualcazar
Copy link
Collaborator

@arnaualcazar arnaualcazar commented May 23, 2025

Adding a Github Action to scan for security vulnerabilities using SCA.
security-scan-branch action builds and scans the selected branch. It outputs the list of vulnerabilities and uploads an artifact with the result. If it detects more than 1 critical or high vulnerability, it returns an error.

security-scan-branch-cron workflow triggers security-scan-branch action once per week.
security-scan-branch-cron workflow triggers security-scan-branch action on every merge to master.

Copy link

netlify bot commented May 23, 2025

Deploy Preview for nextflow-docs-staging ready!

Name Link
🔨 Latest commit e8edd81
🔍 Latest deploy log https://app.netlify.com/projects/nextflow-docs-staging/deploys/683886ba5960b0000a913f7e
😎 Deploy Preview https://deploy-preview-6117--nextflow-docs-staging.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@arnaualcazar arnaualcazar force-pushed the arnau/feat/sca-branch-scan branch from e49ee1e to 8a9c9f3 Compare May 26, 2025 10:01
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
Signed-off-by: Arnau Alcázar Lleopart <arnau.alcazar@seqera.io>
@arnaualcazar arnaualcazar force-pushed the arnau/feat/sca-branch-scan branch from d7e375a to e8edd81 Compare May 29, 2025 16:09
@arnaualcazar arnaualcazar marked this pull request as ready for review May 29, 2025 16:09
@arnaualcazar arnaualcazar requested a review from pditommaso May 29, 2025 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants