Skip to content

Commit e805f0e

Browse files
Add check to prevent security exclusions in code
Signed-off-by: Francesco Giordano <[email protected]>
1 parent 38e0fed commit e805f0e

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed
Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
name: Security Exclusions Checker
2+
on:
3+
pull_request:
4+
types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled]
5+
6+
jobs:
7+
# Prevent security exclusions
8+
security-exclusions-check:
9+
runs-on: ubuntu-latest
10+
steps:
11+
- name: Check PR
12+
uses: francesco-giordano/[email protected]
13+
with:
14+
diffDoesNotContainRegex: "\\bnosec\\b|\\bnosemgrep\\b"
15+
skipLabels: skip-security-exclusions-check

0 commit comments

Comments
 (0)