Update Security Dashboard #1239
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Update Security Dashboard | |
| on: | |
| workflow_run: | |
| # "Conformance" is included so the conformance dashboard (a separate job in | |
| # the reusable) updates on every push to main rather than only when the | |
| # daily vulnerability scan runs. The security dashboard job in the reusable | |
| # skips automatically when triggered by Conformance (no Trivy artifacts). | |
| workflows: ["Vulnerability Scan", "Build & Publish", "Conformance"] | |
| types: [completed] | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| actions: read | |
| jobs: | |
| dashboard: | |
| uses: atlanhq/application-sdk/.github/workflows/update-dashboard.yaml@main | |
| with: | |
| scan_workflow: ${{ github.event.workflow_run.name == 'Build & Publish' && 'build-and-publish.yaml' || 'vulnerability-scan.yml' }} | |
| secrets: inherit |