diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2cf3f2b..ea25079 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,4 +1,4 @@ -name: Continuous Integration +name: CI on: push: @@ -7,13 +7,13 @@ on: branches: [ "main" ] jobs: - sast-semgrep: + semgrep: uses: yutila-org/.github/.github/workflows/semgrep.yml@main - sbom-generation: - uses: yutila-org/.github/.github/workflows/sbom-syft.yml@main + sbom: + uses: yutila-org/.github/.github/workflows/sbom.yml@main with: target-path: '.' - secret-scanning: + secrets: uses: yutila-org/.github/.github/workflows/secret-scan.yml@main \ No newline at end of file diff --git a/.github/workflows/sbom-syft.yml b/.github/workflows/sbom.yml similarity index 100% rename from .github/workflows/sbom-syft.yml rename to .github/workflows/sbom.yml diff --git a/policies/Main Protection.json b/policies/Main Protection.json index 8b77ab4..b16d46d 100644 --- a/policies/Main Protection.json +++ b/policies/Main Protection.json @@ -3,8 +3,8 @@ "strict": true, "contexts": [ "semgrep", - "syft", - "gitleaks" + "sbom", + "secrets" ] }, "enforce_admins": true,