diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..e649169 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,18 @@ +name: CodeQL (Swift) - SAST + +on: + pull_request: + branches: + - master + push: + branches: + - master + workflow_dispatch: + +jobs: + code-scanning: + uses: hyperwallet/public-security-workflows/.github/workflows/codeql-swift.yml@feature/ios-update + with: + build-scheme: Insights + # build-workspace: Insights.xcworkspace + \ No newline at end of file diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..19140c5 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,10 @@ +name: CodeQL Dependency Review - SCA + +on: + pull_request: + push: + workflow_dispatch: + +jobs: + dependency-review: + uses: hyperwallet/public-security-workflows/.github/workflows/dependency-review.yml@main \ No newline at end of file