rl-scanner-only #26

	name: RL-Secure Workflow
	run-name: rl-scanner-only

	on:
	merge_group:
	workflow_dispatch:
	push:
	branches: ['main']
	pull_request:
	types:
	- opened
	- synchronize

	jobs:
	checkout-build-scan-only:
	runs-on: ubuntu-latest

	environment: security

	permissions:
	pull-requests: write

	steps:
	- uses: actions/checkout@v4

	- name: Install npm dependencies
	run: npm install

	- name: Create tgz build artifact
	run: \|
	tar -czvf auth0-spa-js.tgz *

	- name: Get Artifact Version
	id: get_version
	run: echo "::set-output name=version::$(cat .version)"

	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: '3.9'

	- name: Install Python dependencies
	run: \|
	pip install --upgrade pip
	pip install -r scripts/requirements.txt

	- name: Run Reversing Labs Wrapper Scanner
	env:
	RLSECURE_LICENSE: ${{ secrets.RLSECURE_LICENSE }}
	RLSECURE_SITE_KEY: ${{ secrets.RLSECURE_SITE_KEY }}
	SIGNAL_HANDLER_TOKEN: ${{ secrets.SIGNAL_HANDLER_TOKEN }}
	run: \|
	python scripts/rl-wrapper.py \
	--artifact "$(pwd)/auth0-spa-js.tgz" \
	--name "${{ github.event.repository.name }}" \
	--version "${{ steps.get_version.outputs.version }}" \
	--repository "${{ github.repository }}" \
	--commit "${{ github.sha }}" \
	--build-env "GitHub Actions"
	continue-on-error: true

Provide feedback