chore(ci): implement code scanning (#18)

Implement PR code scanning and SBOM on release.
circlefin · Jan 23, 2024 · 9b252e1 · 9b252e1
1 parent 32fd993
commit 9b252e1
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/e2e-tests.yaml b/.github/workflows/e2e-tests.yaml
@@ -3,6 +3,7 @@ name: E2E Tests
 on:
  pull_request:
  push:
+ branches: [master]
 
 jobs:
  e2e-tests:

diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml
@@ -3,6 +3,7 @@ name: Unit Tests
 on:
  pull_request:
  push:
+ branches: [master]
 
 jobs:
  unit-tests:
@@ -18,3 +19,13 @@ jobs:
 
  - name: Run Unit Tests
  run: make test-unit
+
+ scan:
+ needs: unit-tests
+ if: github.event_name == 'pull_request'
+ uses: circlefin/circle-public-github-workflows/.github/workflows/pr-scan.yaml@v1
+
+ release-sbom:
+ needs: unit-tests
+ if: github.event_name == 'push'
+ uses: circlefin/circle-public-github-workflows/.github/workflows/attach-release-assets.yaml@v1