ci: add claude as a reviewr #3

	---
	name: feature

	on:
	push:
	branches-ignore:
	- main

	permissions:
	contents: read

	jobs:
	hadolint:
	name: hadolint
	runs-on: ubuntu-24.04
	steps:
	- name: checkout
	uses: actions/checkout@v7

	- name: run-hadolint
	uses: hadolint/hadolint-action@v3.3.0
	with:
	dockerfile: ./Dockerfile

	trivy-scan:
	name: trivy-scan
	runs-on: ubuntu-24.04
	steps:
	- name: checkout
	uses: actions/checkout@v7

	- name: run-trivy-scan
	uses: aquasecurity/trivy-action@v0.36.0
	with:
	scan-type: config
	severity: HIGH,CRITICAL
	exit-code: "1"
	scan-ref: .

	actionlint:
	name: actionlint
	runs-on: ubuntu-24.04
	steps:
	- name: checkout
	uses: actions/checkout@v7

	- name: run-actionlint
	uses: raven-actions/actionlint@v2
	with:
	fail-on-error: true

	gitguardian-scan:
	name: gitguardian-scan
	runs-on: ubuntu-24.04
	permissions:
	contents: read
	steps:
	- name: checkout
	uses: actions/checkout@v7
	with:
	fetch-depth: 0 # fetch all history so multiple commits can be scanned
	- name: scan
	uses: GitGuardian/ggshield-action@v1
	env:
	GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
	GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}
	GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
	GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}

Navigation Menu