chore(ci): implement code scanning (#18)

Implement PR code scanning and SBOM on release.
circlefin · Jan 23, 2024 · 9b252e1 · 9b252e1
1 parent 32fd993
commit 9b252e1
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/e2e-tests.yaml b/.github/workflows/e2e-tests.yaml
@@ -3,6 +3,7 @@ name: E2E Tests
 on:
   pull_request:
   push:
+    branches: [master]
 
 jobs:
   e2e-tests:

diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml
@@ -3,6 +3,7 @@ name: Unit Tests
 on:
   pull_request:
   push:
+    branches: [master]
 
 jobs:
   unit-tests:
@@ -18,3 +19,13 @@ jobs:
 
       - name: Run Unit Tests
         run: make test-unit
+
+  scan:
+    needs: unit-tests
+    if: github.event_name == 'pull_request'
+    uses: circlefin/circle-public-github-workflows/.github/workflows/pr-scan.yaml@v1
+
+  release-sbom:
+    needs: unit-tests
+    if: github.event_name == 'push'
+    uses: circlefin/circle-public-github-workflows/.github/workflows/attach-release-assets.yaml@v1