name: Scheduled Security Scan
on:
schedule:
- cron: '0 0,6,12,18 * * *'
concurrency:
group: ${{ format('workflow-{0}-{1}', github.workflow, github.ref) }}
cancel-in-progress: true
jobs:
scheduled-scan:
name: Scheduled Security Scan (${{ matrix.branch }})
strategy:
fail-fast: false
matrix:
branch: ['develop', 'release/3', 'release/2']
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v6
with:
fetch-depth: 0
persist-credentials: false
ref: ${{ matrix.branch }}
- name: Setup pnpm
uses: pnpm/action-setup@v4
with:
version: 10
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: 22
cache: 'pnpm'
- name: Run security scans
uses: public-ui/kolibri/.github/actions/security-scan@develop
with:
install-deps: 'true'