mirror of
https://github.com/step-security/harden-runner.git
synced 2026-06-06 04:47:09 +00:00
Merge pull request #290 from step-security/ak-code-reviewer-main
adding a workflow for reviewing code changes using stepsecurity code reviewer
This commit is contained in:
commit
6dacdfc16c
1 changed files with 26 additions and 0 deletions
26
.github/workflows/code-review.yml
vendored
Normal file
26
.github/workflows/code-review.yml
vendored
Normal file
|
|
@ -0,0 +1,26 @@
|
|||
name: Code Review
|
||||
on:
|
||||
pull_request:
|
||||
branches:
|
||||
- main
|
||||
- int
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
code-review:
|
||||
name: Code Review
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
pull-requests: write
|
||||
steps:
|
||||
- name: Harden Runner
|
||||
uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
|
||||
with:
|
||||
egress-policy: audit
|
||||
|
||||
- name: Code Review
|
||||
uses: docker://ghcr.io/step-security/code-reviewer/int:latest
|
||||
env:
|
||||
PAT: ${{ secrets.GITHUB_TOKEN }}
|
||||
Loading…
Add table
Add a link
Reference in a new issue