Skip to content

Commit 67bc31e

Browse files
authored
Enabling MetaMask security code scanner (#133)
* Enabling security code scanner * Update security code scanner file
1 parent b8bffc5 commit 67bc31e

File tree

1 file changed

+43
-0
lines changed

1 file changed

+43
-0
lines changed
Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
name: 'MetaMask Security Code Scanner'
2+
3+
on:
4+
push:
5+
branches: ['main']
6+
pull_request:
7+
branches: ['main']
8+
9+
jobs:
10+
run-security-scan:
11+
runs-on: ubuntu-latest
12+
permissions:
13+
actions: read
14+
contents: read
15+
security-events: write
16+
steps:
17+
- name: MetaMask Security Code Scanner
18+
uses: MetaMask/Security-Code-Scanner@main
19+
with:
20+
repo: ${{ github.repository }}
21+
paths_ignored: |
22+
.storybook/
23+
'**/__snapshots__/'
24+
'**/*.snap'
25+
'**/*.stories.js'
26+
'**/*.stories.tsx'
27+
'**/*.test.browser.ts*'
28+
'**/*.test.js*'
29+
'**/*.test.ts*'
30+
'**/fixtures/'
31+
'**/jest.config.js'
32+
'**/jest.environment.js'
33+
'**/mocks/'
34+
'**/test*/'
35+
docs/
36+
e2e/
37+
merged-packages/
38+
node_modules
39+
storybook/
40+
test*/
41+
rules_excluded: example
42+
project_metrics_token: ${{ secrets.SECURITY_SCAN_METRICS_TOKEN }}
43+
slack_webhook: ${{ secrets.APPSEC_BOT_SLACK_WEBHOOK }}

0 commit comments

Comments
 (0)