47 lines
1.1 KiB
YAML
47 lines
1.1 KiB
YAML
name: MetaMask Security Code Scanner
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
run-security-scan:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
actions: read
|
|
contents: read
|
|
security-events: write
|
|
steps:
|
|
- name: MetaMask Security Code Scanner
|
|
uses: MetaMask/action-security-code-scanner@v1
|
|
with:
|
|
repo: ${{ github.repository }}
|
|
paths_ignored: |
|
|
.storybook/
|
|
'**/__snapshots__/'
|
|
'**/*.snap'
|
|
'**/*.stories.js'
|
|
'**/*.stories.tsx'
|
|
'**/*.test.browser.ts*'
|
|
'**/*.test.js*'
|
|
'**/*.test.ts*'
|
|
'**/fixtures/'
|
|
'**/jest.config.js'
|
|
'**/jest.environment.js'
|
|
'**/mocks/'
|
|
'**/test*/'
|
|
docs/
|
|
e2e/
|
|
merged-packages/
|
|
node_modules
|
|
storybook/
|
|
test*/
|
|
rules_excluded: example
|
|
project_metrics_token: ${{ secrets.SECURITY_SCAN_METRICS_TOKEN }}
|
|
slack_webhook: ${{ secrets.APPSEC_BOT_SLACK_WEBHOOK }}
|