diff --git a/.github/workflows/security-code-scanner.yml b/.github/workflows/security-code-scanner.yml new file mode 100644 index 000000000..eb9da3558 --- /dev/null +++ b/.github/workflows/security-code-scanner.yml @@ -0,0 +1,19 @@ +on: + # allow manual triggering of the workflow + workflow_dispatch: + # Required for Repository Ruleset workflows + push: + +# Add this permissions block +permissions: + actions: read + pull-requests: read + security-events: write + id-token: write + contents: read + +jobs: + Security-Code-Scanner: + uses: shopify-playground/github-actions/.github/workflows/security-code-scanner-workflow.yml@main + secrets: + token: ${{ secrets.GITHUB_TOKEN }}