From bd3e4a39e79f8e28cc3cb2944aeb8e7e8428c688 Mon Sep 17 00:00:00 2001 From: Rakesh Arunachalam <rakesh@thoughtbot.com> Date: Fri, 19 Jul 2024 07:28:09 -0700 Subject: [PATCH] Add a dynamic security workflow and a SECURITY.md file (#706) --- .github/workflows/dynamic-security.yml | 19 +++++++++++++++++++ SECURITY.md | 2 ++ 2 files changed, 21 insertions(+) create mode 100644 .github/workflows/dynamic-security.yml create mode 100644 SECURITY.md diff --git a/.github/workflows/dynamic-security.yml b/.github/workflows/dynamic-security.yml new file mode 100644 index 00000000..26a424dc --- /dev/null +++ b/.github/workflows/dynamic-security.yml @@ -0,0 +1,19 @@ +name: update-security + +on: + push: + paths: + - SECURITY.md + branches: + - main + workflow_dispatch: + +jobs: + update-security: + permissions: + contents: write + pull-requests: write + pages: write + uses: thoughtbot/templates/.github/workflows/dynamic-security.yaml@main + secrets: + token: ${{ secrets.GITHUB_TOKEN }} diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..9b63758c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,2 @@ +<!-- START /templates/security.md --> +<!-- END /templates/security.md -->