Microsoft SQL Server MCP Server

name: Security Scan on: schedule: - cron: '0 0 * * 1' # Weekly on Monday push: branches: [ main ] pull_request: branches: [ main ] workflow_dispatch: permissions: contents: read security-events: write jobs: dependency-check: name: Dependency Security Check runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - name: Set up Python uses: actions/setup-python@v5 with: python-version: '3.11' - name: Install dependencies run: | python -m pip install --upgrade pip pip install safety pip-audit pip install -r requirements.txt - name: Run Safety check run: | safety check --json --output safety-report.json || true - name: Run pip-audit run: | pip-audit --format json --output pip-audit-report.json || true - name: Upload security reports uses: actions/upload-artifact@v4 if: always() with: name: dependency-security-reports path: | safety-report.json pip-audit-report.json codeql-analysis: name: CodeQL Analysis runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - name: Initialize CodeQL uses: github/codeql-action/init@v3 with: languages: python - name: Autobuild uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3