From 55d89f835be94f7146f4184766c2b9fd7283507c Mon Sep 17 00:00:00 2001 From: Tony Bark Date: Thu, 1 May 2025 08:48:26 -0400 Subject: [PATCH] Monthly Vulnerability Scan --- .../workflows/monthly-vulnerability-scan.yml | 27 +++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/monthly-vulnerability-scan.yml diff --git a/.github/workflows/monthly-vulnerability-scan.yml b/.github/workflows/monthly-vulnerability-scan.yml new file mode 100644 index 0000000..eea0819 --- /dev/null +++ b/.github/workflows/monthly-vulnerability-scan.yml @@ -0,0 +1,27 @@ +# .github/workflows/monthly-vulnerability-scan.yml +name: Monthly Vulnerability Scan + +on: + schedule: + - cron: "0 0 1 * *" # Runs at 00:00 on the 1st day of every month + workflow_dispatch: # Allows manual triggering + +jobs: + scan-vulnerabilities: + name: Scan for .NET Package Vulnerabilities + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Setup .NET + uses: actions/setup-dotnet@v4 + with: + dotnet-version: "8.0.x" # Match latest LTS or adjust as needed + + - name: Restore dependencies + run: dotnet restore + + - name: List vulnerable packages + run: dotnet list package --vulnerable