-
-
Notifications
You must be signed in to change notification settings - Fork 0
35 lines (30 loc) · 1.03 KB
/
security-hardening.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
name: Security Hardening
on: push
env:
SLACK_NOTIFY: true
# Declare default permissions as read only.
permissions: read-all
jobs:
harden_security:
name: Harden Security
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Ensure SHA pinned actions
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@0901cf7b71c7ea6261ec69a3dc2bd3f9264f893e # v3.0.12
slack-workflow-status:
if: always()
name: Slack Post Workflow Notification
needs:
- harden_security
runs-on: ubuntu-latest
steps:
- name: Slack Workflow Notifications
if: ${{ env.SLACK_NOTIFY == 'true' && github.event_name == 'push' }}
uses: Gamesight/slack-workflow-status@68bf00d0dbdbcb206c278399aa1ef6c14f74347a # v1.3.0
with:
repo_token: ${{ secrets.GITHUB_TOKEN }}
slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
include_jobs: on-failure
include_commit_message: true