chore(ci): implement code scanning

circlefin · Jan 17, 2024 · 437582a · 437582a
1 parent dc9427f
commit 437582a
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/pull_request_checks.yml b/.github/workflows/pull_request_checks.yml
@@ -21,3 +21,7 @@ jobs:
         run: yarn build
       - name: Running unit test's
         run: yarn test
+
+  scan:
+    needs: lint
+    uses: circlefin/circle-public-github-workflows/.github/workflows/pr-scan.yaml@v1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,6 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       did-create-release: ${{ steps.release.outputs.release_created }}
+      release-tag: ${{ steps.release.outputs.tag_name }}
     steps:
       - uses: google-github-actions/release-please-action@v3
         id: release
@@ -26,3 +27,10 @@ jobs:
     if: needs.release-please.outputs.did-create-release
     uses: ./.github/workflows/npm-publish.yml
     secrets: inherit
+
+  release-sbom:
+    needs: release-please
+    if: needs.release-please.outputs.did-create-release
+    uses: circlefin/circle-public-github-workflows/.github/workflows/attach-release-assets.yaml@v1
+    with:
+      release_tag: ${{ needs.release-please.outputs.release-tag }}