chore: move dependency scan to gh actions

launchdarkly · Sep 23, 2024 · fad65cf · fad65cf
1 parent 8008564
commit fad65cf
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 15 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml
@@ -0,0 +1,20 @@
+name: Dependency Scan
+
+on: pull_request
+
+jobs:
+  dependency-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Setup Go
+        uses: actions/setup-go@v4
+        with:
+          go-version-file: go.mod
+
+      - name: Generate SBOM
+        uses: launchdarkly/common-actions/dependency-scan/generate-sbom@main
+        with:
+          types: 'go,nodejs'
+
+      - name: Evaluate SBOM Policy
+        uses: launchdarkly/common-actions/dependency-scan/evaluate-policy@main