Files
OpenSTA/.github/workflows/on-push.yml
T
Vitor Bandeira 38442a61a7 gha: use commit sha instead of version/tag
Using commit sha helps prevent chain attacks that have become common.

Signed-off-by: Vitor Bandeira <[email protected]>
2026-05-27 14:34:50 -03:00

17 lines
450 B
YAML

name: Scan Code with pre commit trigger
on:
push:
pull_request:
branches:
- master
jobs:
Security-Scan:
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
steps:
- name: Check out repository code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: run security_scan_on_push
uses: The-OpenROAD-Project/actions/security_scan_on_push@main