From 0ae22c990d4727af35bbce79ada1a8c8bc500656 Mon Sep 17 00:00:00 2001 From: Nathanael Esayeas Date: Mon, 8 Apr 2024 15:54:57 -0500 Subject: [PATCH] Add compliance.yml Signed-off-by: Nathanael Esayeas --- .github/workflows/compliance.yml | 37 ++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .github/workflows/compliance.yml diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml new file mode 100644 index 0000000..2674317 --- /dev/null +++ b/.github/workflows/compliance.yml @@ -0,0 +1,37 @@ +name: Compliance + +on: + pull_request: + push: + branches: + # Default branch + - "main" + # Release branches + ## 1.2.x - eg. Semantic Versioning + - "[0-9]+.[0-9]+.x" + ## v1 - eg. GitHub Actions Versioning + - "v[0-9]+" + # Scheduled workflow + schedule: + # Runs hourly + - cron: "0 * * * *" + # Manually Trigger workflow + workflow_dispatch: + +# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions +permissions: + actions: write # permits an action to cancel a workflow run. + checks: write # permits an action to create a check run. + contents: write # allows the action to create a release. + discussions: write # permits an action to close or delete a discussion. + issues: write # permits an action to add a comment to an issue + packages: write # permits an action to upload and publish packages on GitHub Packages. + pages: write # permits an action to request a GitHub Pages build. + pull-requests: write # permits an action to add a label to a pull request. + +jobs: + automation: + uses: ghostwriter/compliance/.github/workflows/automation.yml@v1 + secrets: + GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} + INFECTION_DASHBOARD_API_KEY: ${{ secrets.INFECTION_DASHBOARD_API_KEY }}