check-security-alerts.yml

name: Check security alerts

on:
  schedule:
  - cron: "30 1 * * *"
  workflow_dispatch:

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v3
        with: 
          node-version: latest
      - uses: actions/github-script@v7
        with:
          github-token: ${{ secrets.ACTIVE_TOKEN }}
          script: |
            const {default: SecurityChecker} = await import('${{ github.workspace }}/.github/scripts/security-checker.mjs')

            const securityChecker = new SecurityChecker(github, context, '${{secrets.SECURITY_ISSUE_REPO}}');

            await securityChecker.check();
  
  keepalive-job:
    name: Keepalive Workflow
    if: ${{ always() }}
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
      - uses: gautamkrishnar/keepalive-workflow@v2
        with:
          gh_token: ${{ secrets.ACTIVE_TOKEN }}