thomas/sigil
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity Actions

ci: add daily dependency security checks #2

Merged
thomas merged 2 commits from security/dependency-scanning into main 2026-10-02 14:35:26 +01:00
Conversation 0 Commits 2 Files changed 1 +33
renovate commented 2026-10-02 14:25:53 +01:00
Collaborator
Copy link

Adds a checksum-verified OSV Scanner check on pushes, pull requests, and daily at 04:00 UTC. Scans committed lockfiles recursively, including transitive dependencies. No project install/build scripts or call analysis are executed. Known advisories intentionally fail the check; review reachability before prioritizing fixes. Nix closures and deployed containers are not covered. This workflow becomes active on the default branch after you merge this PR. Renovate auto-merge remains disabled.

Adds a checksum-verified OSV Scanner check on pushes, pull requests, and daily at 04:00 UTC. Scans committed lockfiles recursively, including transitive dependencies. No project install/build scripts or call analysis are executed. Known advisories intentionally fail the check; review reachability before prioritizing fixes. Nix closures and deployed containers are not covered. This workflow becomes active on the default branch after you merge this PR. Renovate auto-merge remains disabled.
ci: scan dependencies for security advisories daily
Some checks failed
Dependency security / osv (push) Failing after 2s
Details
Dependency security / osv (pull_request) Failing after 2s
Details
dfd29a008f
fix(ci): pass explicit OSV call-analysis options
All checks were successful
Dependency security / osv (push) Successful in 3s
Details
Dependency security / osv (pull_request) Successful in 4s
Details
4d96118c4a
thomas merged commit 2913c36d19 into main 2026-10-02 14:35:26 +01:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
thomas/sigil!2
No description provided.