diff --git a/.github/workflows/socket-security.yml b/.github/workflows/socket-security.yml new file mode 100644 index 0000000000..13d6feccc2 --- /dev/null +++ b/.github/workflows/socket-security.yml @@ -0,0 +1,22 @@ +name: Socket Security + +on: + pull_request: + branches: [main] + +permissions: + contents: read + pull-requests: write + issues: write + +jobs: + socket-security: + runs-on: ubuntu-latest + name: Socket.dev Security Review + steps: + - uses: actions/checkout@v4 + + - name: Socket Security Review + uses: SocketDev/action@v1 + with: + socket-token: ${{ secrets.SOCKET_API_KEY }}