new repo

Author: Raj-StepSecurity

.github/workflows/guarddog.yml

@@ -1,4 +1,4 @@
-name: Run GuardDog Scan on PRs
+name: GuardDog Full Security Scan
 
 on:
   push:
@@ -10,5 +10,62 @@ permissions:
   contents: read
 
 jobs:
-  call-guarddog-scan:
-    uses: step-security/reusable-workflows/.github/workflows/guarddog.yml@release_guarddog-security
+  guarddog:
+    name: GuardDog - Full Scan
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.10"
+
+      - name: Install GuardDog
+        run: pip install guarddog
+
+      - name: Create custom temp directory
+        run: mkdir -p ${{ github.workspace }}/guarddog-tmp
+
+      - name: Set TMPDIR
+        run: echo "TMPDIR=${{ github.workspace }}/guarddog-tmp" >> $GITHUB_ENV
+
+      - name: 🐶 Local files scan
+        id: local_scan
+        continue-on-error: true
+        run: |
+          guarddog npm scan . --output-format json > guarddog_local.json 2>&1
+          cat guarddog_local.json
+
+      - name: 🔍 Dependency scan (package.json)
+        id: deps_scan
+        continue-on-error: true
+        run: |
+          guarddog npm verify ./package.json --output-format json > guarddog_deps.json 2>&1
+          cat guarddog_deps.json
+
+      - name: 📦 Upload GuardDog outputs
+        uses: actions/upload-artifact@v4
+        with:
+          name: guarddog-results
+          path: |
+            guarddog_local.json
+            guarddog_deps.json
+
+      - name: ❗ Final check for findings
+        run: |
+          local_issues=$(jq '[.results[] | select(length > 0)] | length' guarddog_local.json)
+          dep_issues=$(jq '[.results[] | select(length > 0)] | length' guarddog_deps.json)
+
+          echo "Local scan findings: $local_issues"
+          echo "Dependency scan findings: $dep_issues"
+
+          if [ "$local_issues" -gt 0 ] || [ "$dep_issues" -gt 0 ]; then
+            echo "❌ GuardDog found issues"
+            exit 1
+          else
+            echo "✅ GuardDog found no issues"
+          fi