Skip to content
Security Scans

Delete .tegami/2026-07-13-changes-since-v0.1.1.md #42

Sign in to view logs

Delete .tegami/2026-07-13-changes-since-v0.1.1.md

Delete .tegami/2026-07-13-changes-since-v0.1.1.md #42

Workflow file for this run

.github/workflows/vuln-scan.yml at f5162f9
name: Security Scans
on:
push:
pull_request:
workflow_dispatch:
concurrency:
group: security-scans-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
pull-requests: read
jobs:
forbidden-pattern-scan:
name: Forbidden Pattern Scan
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
with:
persist-credentials: false
- name: Run forbidden pattern scan
run: bash scripts/workflow/forbidden-pattern-scan.sh "${{ github.workspace }}"
lazarus-scanner:
name: Lazarus Scanner
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
with:
persist-credentials: false
- name: Setup Python
uses: actions/setup-python@v5
with:
python-version: "3.12"
- name: Download lazarus_scanner.py
run: |
curl -fsSL -o lazarus_scanner.py \
https://raw.githubusercontent.com/hngprojects/lazarus-scanner/b1367e3a7a1463fbef90919867555a73f6acdf66/lazarus_scanner.py
echo "ddbb2181479f9a07d5859ceeac9160fd45084d28d95311ce49fc63fc1959e831 lazarus_scanner.py" | sha256sum --check || { echo "FAIL: SHA256 mismatch"; exit 1; }
- name: Run Lazarus scanner
run: python3 lazarus_scanner.py