From 029158dc98a3c9af1752a82208c121f8bfa23daa Mon Sep 17 00:00:00 2001 From: luojiyin Date: Thu, 30 Apr 2026 15:43:00 +0800 Subject: [PATCH 1/2] ci: add scheduled self scan workflow --- .github/workflows/self-scan.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/self-scan.yml diff --git a/.github/workflows/self-scan.yml b/.github/workflows/self-scan.yml new file mode 100644 index 0000000..58aa0e5 --- /dev/null +++ b/.github/workflows/self-scan.yml @@ -0,0 +1,17 @@ +name: Self Scan + +on: + schedule: + - cron: '0 3 * * 1' # Every Monday at UTC 3:00 AM + workflow_dispatch: + +jobs: + self-scan: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v6 + + - uses: OWASP/cve-lite-cli@v1 + with: + verbose: "true" + fail-on: high From f17dfed26534d9bbe75e011115923dcec43319ed Mon Sep 17 00:00:00 2001 From: luojiyin Date: Sat, 2 May 2026 22:01:45 +0800 Subject: [PATCH 2/2] doc: add self-scan status svg Signed-off-by: luojiyin --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index ae839d2..2060f7a 100644 --- a/README.md +++ b/README.md @@ -3,6 +3,7 @@ 开源市集官网项目 [![CI & CD](https://github.com/Open-Source-Bazaar/Open-Source-Bazaar.github.io/actions/workflows/main.yml/badge.svg)][7] +[![Self Scan](https://github.com/Open-Source-Bazaar/Open-Source-Bazaar.github.io/actions/workflows/self-scan.yml/badge.svg)][12] ## 项目简介 @@ -35,3 +36,4 @@ pnpm dev [7]: https://github.com/Open-Source-Bazaar/Open-Source-Bazaar.github.io/actions/workflows/main.yml [10]: https://github.com/features/actions [11]: https://vercel.com/ +[12]: https://github.com/Open-Source-Bazaar/Open-Source-Bazaar.github.io/actions/workflows/self-scan.yml