Repository navigation

Bump actions/checkout from 6 to 7 #13

	# eustasy/.Normal 4.0beta10
	name: "Normal: Security"
	on:
	workflow_dispatch:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	security:
	name: Security scan
	runs-on: ubuntu-latest
	steps:
	- name: Checkout (full history for gitleaks)
	uses: actions/checkout@v7
	with:
	fetch-depth: 0
	persist-credentials: false

	- uses: qltysh/qlty-action/install@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1

	- name: Security scan
	run: qlty check --all --no-formatters --filter=gitleaks,trivy,osv-scanner