Merge 9534644a39 into fd889a14c0

.github/dependabot.yml

@@ -0,0 +1,8 @@
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "04:00"
+      timezone: Asia/Calcutta

.github/workflows/security.yml

@@ -0,0 +1,25 @@
+name: Security
+on:
+  workflow_dispatch:
+  pull_request: { }
+  push:
+    branches: [ "dev" ]
+  schedule:
+    - cron: '30 20 * * *'
+jobs:
+  security-sast:
+    uses: razorpay/security-action/.github/workflows/semgrep.yml@master
+    secrets:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+
+  security-statuscheck:
+    needs: [ security-sast ]
+    if: always()
+    uses: razorpay/security-action/.github/workflows/status_check.yml@master
+    with:
+      WORKFLOW_RESULT: ${{ needs.security-sast.result == 'success' && needs.security-sast.result != 'cancelled' || 'false' }}
+
+  scan-dependencies:
+    uses: razorpay/security-action/.github/workflows/dependency-scanner.yml@master
+    with:
+      DEPENDABOT_PATH: ".github/dependabot.yml"