Skip to content

Commit 730fcbe

Browse files
authored
chore: Add dependabot vulnerability notifications (#1942)
1 parent de91481 commit 730fcbe

1 file changed

Lines changed: 17 additions & 0 deletions

File tree

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
name: Vulnerability Alerts
2+
3+
on:
4+
schedule:
5+
- cron: '0 9 * * *' # Daily at 9am UTC
6+
workflow_dispatch:
7+
8+
jobs:
9+
alert:
10+
runs-on: ubuntu-latest
11+
steps:
12+
- uses: kunalnagarco/action-cve@v1.14.23
13+
with:
14+
org: hyperdxio
15+
token: ${{ secrets.DEPENDABOT_NOTIF_PAT }}
16+
slack_webhook: ${{ secrets.SLACK_WEBHOOK_VULNERABILITIES }}
17+
severity: medium,high,critical

0 commit comments

Comments
 (0)