diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9c6142d71..79991062e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -11,6 +11,16 @@ on: pull_request: jobs: + codeql-sast: + name: CodeQL SAST scan + uses: alphagov/govuk-infrastructure/.github/workflows/codeql-analysis.yml@main + permissions: + security-events: write + + dependency-review: + name: Dependency Review scan + uses: alphagov/govuk-infrastructure/.github/workflows/dependency-review.yml@main + security-analysis: name: Security Analysis uses: alphagov/govuk-infrastructure/.github/workflows/brakeman.yml@main