From 92b6376df57d16c3388b58e9f44cbb06876a6e0e Mon Sep 17 00:00:00 2001 From: Frederik Prijck Date: Mon, 16 Mar 2026 19:30:40 +0100 Subject: [PATCH 1/2] feat: Add SCA scan workflow --- .github/workflows/sca_scan.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/workflows/sca_scan.yml diff --git a/.github/workflows/sca_scan.yml b/.github/workflows/sca_scan.yml new file mode 100644 index 0000000..ecf9ffe --- /dev/null +++ b/.github/workflows/sca_scan.yml @@ -0,0 +1,15 @@ +name: SCA + +on: + push: + branches: [main] + pull_request: + branches: [main] + +jobs: + snyk-cli: + uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main + with: + additional-arguments: "--exclude=README.md" + python-version: "3.12" + secrets: inherit From fae7fe3559145d1d76e10144958442e814d2fdc4 Mon Sep 17 00:00:00 2001 From: Frederik Prijck Date: Mon, 16 Mar 2026 19:33:18 +0100 Subject: [PATCH 2/2] Add pre-scan command to SCA scan workflow --- .github/workflows/sca_scan.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/sca_scan.yml b/.github/workflows/sca_scan.yml index ecf9ffe..beb966a 100644 --- a/.github/workflows/sca_scan.yml +++ b/.github/workflows/sca_scan.yml @@ -10,6 +10,7 @@ jobs: snyk-cli: uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main with: + pre-scan-commands: "pip install -r requirements.txt" additional-arguments: "--exclude=README.md" python-version: "3.12" secrets: inherit