Develop

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/security-gate.yml

@@ -0,0 +1,35 @@
+name: Security Gate - Instriq
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      MAX_CRITICAL: 0
+      MAX_HIGH: 0
+      MAX_MEDIUM: 0
+      MAX_LOW: 0
+      GITHUB_TOKEN: ${{ secrets.TOKEN }}
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Pull Docker image from GitHub Container Registry
+      run: docker pull ghcr.io/instriq/security-gate/security-gate:latest
+
+    - name: Verify security alerts from dependabot
+      run: |
+        docker run ghcr.io/instriq/security-gate/security-gate:latest \
+        -t $GITHUB_TOKEN \
+        -r ${{ github.repository }} \
+        --critical $MAX_CRITICAL \
+        --high $MAX_HIGH \
+        --medium $MAX_MEDIUM \
+        --low $MAX_LOW

README.md

@@ -6,7 +6,7 @@
       <img src="https://img.shields.io/badge/license-MIT-blue.svg">
     </a>
      <a href="https://github.com/instriq/security-gate/releases">
-      <img src="https://img.shields.io/badge/version-0.0.1-blue.svg">
+      <img src="https://img.shields.io/badge/version-0.0.2-blue.svg">
     </a>
   </p>
 </p>
@@ -33,6 +33,9 @@ on:
   push:
     branches:
       - main
+  pull_request:
+    branches:
+      - main
 
 jobs:
   build:
@@ -75,7 +78,7 @@ $ sudo cpanm --installdeps .
 # Basic usage
 $ perl security-gate.pl --help
 
-Security Gate v0.0.1
+Security Gate v0.0.2
 Core Commands
 ==============
 	Command          Description