Repository navigation

Close the remaining security gaps in apps, the dev server and the platform #718

	name: Security Analysis

	on:
	workflow_dispatch:
	pull_request:
	types: [opened, synchronize]
	push:
	branches:
	- main
	paths:
	- '.github/workflows/**'

	permissions: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.sha }}
	cancel-in-progress: ${{ github.ref_name != 'main' }}

	jobs:
	security:
	name: Security Analysis
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: oxc-project/security-action@cba83d3159bd19731697875c03613fd0fe389f27 # v1.0.7
	with:
	token: ${{ secrets.GITHUB_TOKEN }}