DTECSCSAO-4805 GHAS integration: Code scanning & Dependency review

sekhara-madduru · web-flow · commit f2bfba694679 · 2025-02-04T10:25:49.000+05:30
diff --git a/.github/workflows/security.code-scanning.yml b/.github/workflows/security.code-scanning.yml
@@ -0,0 +1,12 @@
+name: CodeQL
+
+on:
+  pull_request:
+    branches: [ main ]
+  push:
+    branches: [ main ]
+  workflow_dispatch:
+
+jobs:
+  codeql-python:
+    uses: chargehound/security-workflows/.github/workflows/codeql-python.yml@main
diff --git a/.github/workflows/security.dependency-review.yml b/.github/workflows/security.dependency-review.yml
@@ -0,0 +1,10 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches: [ main ]
+  workflow_dispatch:
+
+jobs:
+  dependency-review:
+    uses: chargehound/security-workflows/.github/workflows/dependency-review.yml@main
