on:
  schedule:
    - cron: '0 0 * * SUN'

permissions:
  actions: read
  contents: read
  security-events: write

jobs:
  code-scan:
    uses: smallstep/workflows/.github/workflows/code-scan.yml@main
    secrets: inherit
