Install Amplify Workflow

[amplify-security]

User description

Adds Amplify Workflow for vulnerability scanning and AI generated vulnerability fixes.

---

Summary by cubic

Adds an Amplify Security workflow to scan PRs and pushes for vulnerabilities and suggest automated fixes. Runs safely with minimal permissions and skips forks and Dependabot.

• New Features
  • New workflow at .github/workflows/amplify.yml to run Amplify Security Scan on ubuntu-latest.
  • Triggers on pull_request, push to main/master, and workflow_dispatch.
  • Skips forked PRs and dependabot[bot].
  • Uses contents: read and id-token: write; runs amplify-security/runner-action@develop.

---

CodeAnt-AI Description

• Introduces a new GitHub Actions workflow at .github/workflows/amplify.yml named Amplify Security.
• Triggers automatically on pull requests, pushes to main or master, and via workflow_dispatch for manual runs.
• Grants only the minimal required permissions (contents: read, id-token: write).
• Adds guard clause to skip execution for forked PRs and for the dependabot[bot] actor.
• Defines a single job amplify-security-scan that checks out the repository and invokes amplify-security/runner-action@develop to perform vulnerability scanning.

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
grounder	Error			Sep 13, 2025 7:32am

[bito-code-review]

Bito Automatic Review Skipped - Files Excluded

Bito didn't auto-review this change because all changed files are in the exclusion list for automatic reviews. No action is needed if you didn't intend for the agent to review it. Otherwise, to manually trigger a review, type /review in a comment and save.
You can change the excluded files settings here, or contact your Bito workspace admin at jmjones925@gmail.com.

[codeant-ai]

CodeAnt AI is reviewing your PR.

[codeant-ai]

Suggestion: Pin the external GitHub Action reference to an immutable tag or commit SHA to eliminate the risk of executing unintended code changes from the mutable develop branch. [security]

[codeant-ai]

CodeAnt AI finished reviewing your PR.