fossa.yml (708B)
1 name: Fossa Scan 2 permissions: read-all 3 on: 4 push: 5 branches: [main] 6 jobs: 7 fossa-scan: 8 runs-on: self-hosted 9 steps: 10 # - name: Harden Runner 11 # uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1 12 # with: 13 # allowed-endpoints: " 14 # app.fossa.com:443 15 # github.com:443 16 # objects.githubusercontent.com:443 17 # raw.githubusercontent.com:443" 18 # env: 19 # USER: runner 20 - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 21 - uses: fossas/fossa-action@f61a4c0c263690f2ddb54b9822a719c25a7b608f # main 22 with: 23 api-key: ${{secrets.fossaApiKey}}