Scan for vulnerabilities and create advisories on GitHub.
name: Scan for vulnerabilities on: # Scan for each push event on your protected branch # push: # branches: [ "main" ] # Scan for pull requests # pull_request: # branches: [ "main" ] # Schedule a daily scan at midnight schedule: - cron: '0 0 * * *' workflow_dispatch: jobs: haskell-security: runs-on: ubuntu-latest permissions: security-events: write steps: - name: Checkout repository uses: actions/checkout@v4 - uses: haskell-actions/setup@v2 # GHC is neneded in $PATH with: ghc-version: '9.8' - name: Run Haskell Security Action uses: blackheaven/haskell-security-action@master with: token: ${{ secrets.GITHUB_TOKEN }}