The workflow executes supply chain security tools and reports the results.
Run the workflow on pull requests, pushes to any branch and on a weekly schedule on the default branch.
---
name: Security
on:
push: {}
pull_request: {}
schedule:
- cron: '0 0 * * 1'
jobs:
supply-chain-security-validation:
name: Supply Chain
uses: coopnorge/github-workflow-supply-chain-security-validation/.github/workflows/supply-chain-security-validation.yaml@main