diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml new file mode 100644 index 0000000..d328de3 --- /dev/null +++ b/.github/workflows/daily.yml @@ -0,0 +1,19 @@ +name: daily scan + +on: + schedule: + - cron: '0 20 * * *' + +jobs: + scan: + name: npm audit + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v1 + - name: install dependencies + run: npm ci + - uses: oke-py/npm-audit-action@v0.1.0 + with: + token: ${{ secrets.GITHUB_TOKEN }} + issue_assignees: oke-py + issue_labels: vulnerability diff --git a/README.md b/README.md index a703ec9..c57fc06 100644 --- a/README.md +++ b/README.md @@ -47,3 +47,7 @@ jobs: issue_assignees: oke-py issue_labels: vulnerability,test ``` + +- - - + +This action is inspired by [homoluctus/gitrivy](https://github.com/homoluctus/gitrivy).