deps: bump node from `3638d9a` to `ba849c6` #321

	name: security-scan

	# Security scanning for agent-bridge.
	#
	# Caller for the reusable workflow at creatornader/oss-security-scan,
	# which runs typos + gitleaks + trufflehog + osv-scanner. OSV-Scanner
	# runs on main pushes, the Sunday scheduled run, and manual dispatch.
	# It remains disabled on pull requests to keep review feedback fast.
	#
	# pre-commit job runs textleaks + oss-twin-check at PR time as the
	# CI-side enforcement of the local hooks in .pre-commit-config.yaml.
	#
	# All run: blocks use no github.event.* inputs.

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: '0 9 * * 0'
	workflow_dispatch:

	permissions:
	contents: read
	actions: read
	security-events: write

	jobs:
	scan:
	uses: creatornader/oss-security-scan/.github/workflows/oss-security-scan.yml@8aa840764a462cb1d0195c33539a835c64f8dfa5 # v0.2.0
	with:
	gitleaks-version: '8.30.1'
	gitleaks-config: '.gitleaks.toml'
	run-osv-scanner: ${{ github.event_name != 'pull_request' }}

	pre-commit:
	name: pre-commit (textleaks + oss-twin-check)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
	with:
	python-version: '3.12'
	- run: python -m pip install pre-commit
	- run: pre-commit run --show-diff-on-failure --color=always --all-files

Navigation Menu