diff --git a/.github/workflows/guarddog.yml b/.github/workflows/guarddog.yml new file mode 100644 index 0000000..e6c0670 --- /dev/null +++ b/.github/workflows/guarddog.yml @@ -0,0 +1,14 @@ +name: Run GuardDog Scan on PRs + +on: + push: + branches: [main] + pull_request: + branches: [main] + +permissions: + contents: read + +jobs: + call-guarddog-scan: + uses: step-security/reusable-workflows/.github/workflows/guarddog.yml@v1 diff --git a/action.yml b/action.yml index 4d3a68e..b888503 100644 --- a/action.yml +++ b/action.yml @@ -48,7 +48,7 @@ inputs: runs: using: 'docker' - image: 'docker://ghcr.io/step-security/mongodb-github-action@sha256:14889a419431efee64b706e9307b5c2b15fe157b123b8f9f2fca9f8817dad835' + image: 'docker://ghcr.io/step-security/mongodb-github-action@sha256:07b75dd3727696912a6c91646db413517f238e4fe2bd87788d31b59b9f05ca80' args: - ${{ inputs.mongodb-image }} - ${{ inputs.mongodb-version }}