Skip to content

Conversation

@rkgh4096
Copy link
Contributor

This PR adds or updates the Nautilus SecureSDLC workflow to enable automated security scanning.

Changes

  • Adds/updates .github/workflows/securesdlc.yml
  • Enables security scanning on push events
  • Supports workflow dispatch for manual runs

Requirements

This workflow requires the following secrets to be configured in the repository:

  • SEMGREP_APP_URL: The URL of your Semgrep App instance
  • SEMGREP_APP_TOKEN: The API token for Semgrep App

Testing

The workflow will run automatically on:

  • Push events to the default branch
  • Manual workflow dispatch
  • When called by other workflows

    This PR adds or updates the Nautilus SecureSDLC workflow to enable automated security scanning.

    - Adds/updates .github/workflows/securesdlc.yml
    - Enables security scanning on push events
    - Supports workflow dispatch for manual runs
@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@rkgh4096 rkgh4096 merged commit 9b82fef into main Jul 23, 2025
6 checks passed
@rkgh4096 rkgh4096 deleted the feat/add-securesdlc-workflow branch July 23, 2025 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants