Skip to content
security

security #42

Sign in to view logs

security

security #42

Workflow file for this run

.github/workflows/security.yml at b1be9be
# Copyright 2026 ResQ Software
# SPDX-License-Identifier: Apache-2.0
#
# Thin caller for the org-wide reusable security-scan workflow in
# resq-software/.github. Update the `languages` list to match this repo's
# primary code; everything else inherits.
name: security
on:
push:
branches: [main]
pull_request:
schedule:
- cron: '17 6 * * 1'
workflow_dispatch:
permissions:
contents: read
security-events: write
pull-requests: read
jobs:
scan:

Check failure on line 24 in .github/workflows/security.yml

View workflow run for this annotation

GitHub Actions / security

Invalid workflow file 

The workflow is not valid. .github/workflows/security.yml (Line: 24, Col: 3): Error calling workflow 'resq-software/.github/.github/workflows/security-scan.yml@main'. The nested job 'codeql' is requesting 'actions: read', but is only allowed 'actions: none'. .github/workflows/security.yml (Line: 24, Col: 3): Error calling workflow 'resq-software/.github/.github/workflows/security-scan.yml@main'. The nested job 'zizmor' is requesting 'actions: read', but is only allowed 'actions: none'.
uses: resq-software/.github/.github/workflows/security-scan.yml@main
with:
languages: '["actions"]'
enable-semgrep: true
secrets: inherit