From e83b868ebe53931c6289d05fc07a42b6a491b86b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vincent=20Molini=C3=A9?= <vincent.m@forestadmin.com>
Date: Fri, 3 Oct 2025 18:22:19 +0200
Subject: [PATCH] ci(security / build): send slack message for security report
 and build failure

---
 .github/workflows/notify-ci-failure.yml  | 12 ++++++++++++
 .github/workflows/vulnerability-scan.yml | 13 +++++++++++++
 2 files changed, 25 insertions(+)
 create mode 100644 .github/workflows/notify-ci-failure.yml
 create mode 100644 .github/workflows/vulnerability-scan.yml

diff --git a/.github/workflows/notify-ci-failure.yml b/.github/workflows/notify-ci-failure.yml
new file mode 100644
index 000000000..06f9e2430
--- /dev/null
+++ b/.github/workflows/notify-ci-failure.yml
@@ -0,0 +1,12 @@
+name: Notify CI Failure on Main
+
+on:
+  workflow_run:
+    workflows: ['Lint, Test, Coverage and Deploy']
+    types: [completed]
+    branches: [main]
+
+jobs:
+  check-and-notify:
+    uses: 'ForestAdmin/github-workflows/.github/workflows/notify-ci-failure.yml@main'
+    secrets: inherit
diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml
new file mode 100644
index 000000000..a73def890
--- /dev/null
+++ b/.github/workflows/vulnerability-scan.yml
@@ -0,0 +1,13 @@
+name: Vulnerability Scan and Slack Notification
+
+on:
+  schedule:
+    # Run every friday at 9 AM UTC
+    - cron: '0 9 * * 5'
+  workflow_dispatch:
+
+jobs:
+  vulnerability-scan:
+    name: Scan and Send Slack notification
+    uses: 'ForestAdmin/github-workflows/.github/workflows/vulnerability-scan.yml@main'
+    secrets: inherit