mirror of
https://github.com/discourse/discourse.git
synced 2026-08-11 02:59:07 +08:00
88b172848c## Summary - Adds `.github/workflows/pr-security-scan.yml` — runs on every non-draft PR, fetches the diff, and sends it to the patch-triage VM for security analysis - Results are posted back as a GitHub Check Run; staff can click "Details" to view the full finding in patch-triage - Handles `closed` events: notifies the VM when a PR is merged or closed so patch-triage can auto-resolve the associated finding - Safe for forks: if `SCAN_SECRET` or `VM_SCAN_URL` secrets are not configured, the workflow silently exits successfully — contributor forks won't break |
||
|---|---|---|
| .. | ||
| actions/setup-release-environment | ||
| instructions | ||
| workflows | ||
| dependabot.yml | ||
| labeler.yml | ||
