add security scan config

Roblox · Nov 11, 2024 · bc24274 · bc24274
1 parent 6811f69
commit bc24274
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/.github/workflows/security-scan.yaml b/.github/workflows/security-scan.yaml
@@ -0,0 +1,17 @@
+name: Security Scan
+
+on:
+    pull_request:
+    push:
+        branches:
+        - main
+
+jobs:
+    security:
+        name: OSS Security SAST
+        uses: Roblox/security-workflows/.github/workflows/oss-security-sast.yaml@main
+        with:
+            skip-ossf: true
+        secrets:
+            GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_KEY }}
+            ROBLOX_SEMGREP_GHC_POC_APP_TOKEN: ${{ secrets.ROBLOX_SEMGREP_GHC_POC_APP_TOKEN }}