Merge pull request #95 from puppetlabs/mend-update

Create mend.yaml

.github/workflows/mend.yaml

@@ -0,0 +1,33 @@
+name: vanagon mend
+
+on:
+  workflow_dispatch:
+  pull_request_target:
+    branches: 
+    - main
+
+jobs:
+ mend_vanagon:
+   runs-on: ubuntu-latest
+   steps:
+    - name: Connect to Twingate
+      uses: twingate/github-action@v1
+      with:
+        service-key: ${{ secrets.TWINGATE_PUBLIC_REPO_KEY }}
+    - name: checkout the current PR
+      uses: actions/checkout@v2
+      with:
+        fetch-depth: 0
+    - name: Run Vanagon Mend Scan
+      uses: puppetlabs/security-mend-vanagon-action@v4.0.0
+      with:
+        mendApiKey: ${{ secrets.MEND_API_KEY }}
+        mendURL: https://saas-eu.whitesourcesoftware.com/agent
+        mendToken: ${{ secrets.MEND_TOKEN }}
+        productName: Puppet Enterprise
+        projectName: ${{ github.event.repository.name }}
+        skipProjects: ''
+        skipPlatforms: ''
+        sshKey: ${{ secrets.SECBOT_SSH_KEY }}
+        sshKeyName: 'id_ed25519'
+        branch : ${{ github.ref_name }}