CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)

OP OpenVibers committed 23 Sept 2026 · 3e229fa9fc · 1 file, +3 −0

Calls OpenVibers/OpenVibe.Shared/.github/workflows/security.yml@83c998b.

Changes

ddiff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
iindex 6972139..fd0aad8 100644
---- a/.github/workflows/ci.yml
++++ b/.github/workflows/ci.yml
@@@ -18,3 +18,6 @@ jobs:
        - run: git clone --depth 1 --branch v0.28.0 https://github.com/OpenVibers/OpenVibe.Contracts.git ../OpenVibe.Contracts
        - run: npm test             # includes the pack test (npm pack + install into a temp project)
        - run: node scripts/esm.js --check
++  # Secret scan (gitleaks) and dependency audit, shared by every OpenVibers repo (Track Q).
++  security:
++    uses: OpenVibers/OpenVibe.Shared/.github/workflows/security.yml@83c998b65424fb97e6f6de55ad9cc5981767e89c