feat: enable guarddog
All checks were successful
test-build / guarddog (push) Successful in 31s
renovate / renovate (push) Successful in 39s
test-build / build (push) Successful in 49s

This commit is contained in:
2026-02-11 15:30:25 -06:00
parent c24d512148
commit 4c02890f61

View File

@@ -51,35 +51,37 @@ jobs:
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=test-build.yaml", "clear": true}]'
image: true
# guarddog:
# runs-on: ubuntu-js
# steps:
# - name: Checkout
# uses: actions/checkout@v6
guarddog:
runs-on: ubuntu-js
steps:
- name: Checkout
uses: actions/checkout@v6
# - name: Set up Python
# uses: actions/setup-python@v6
# with:
# python-version: '3.14'
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: '3.12'
# - name: Install GuardDog
# run: pip install guarddog
- name: Install GuardDog
run: |
python3 -m pip install --upgrade pip
python3 -m pip install guarddog
# - name: Run GuardDog
# run: |
# guarddog npm scan .
- name: Run GuardDog
run: |
guarddog npm scan ./
# - name: ntfy Failed
# uses: niniyas/ntfy-action@master
# if: failure()
# with:
# url: '${{ secrets.NTFY_URL }}'
# topic: '${{ secrets.NTFY_TOPIC }}'
# title: 'Security Failure - Site Documentation'
# priority: 4
# headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
# tags: action,failed
# details: 'Guarddog scan failed for Site Documentation'
# icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
# actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=test-build.yaml", "clear": true}]'
# image: true
- name: ntfy Failed
uses: niniyas/ntfy-action@master
if: failure()
with:
url: '${{ secrets.NTFY_URL }}'
topic: '${{ secrets.NTFY_TOPIC }}'
title: 'Security Failure - Site Documentation'
priority: 4
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
tags: action,failed
details: 'Guarddog scan failed for Site Documentation'
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=test-build.yaml", "clear": true}]'
image: true