Product Design Presentation

# Socket Security CloneAGC Actions Workflow
# This workflow runs Socket Security scans on every commit to any branch
# It automatically detects git repository information and handles different event types
 
name: socket-security-workflow
run-name: Socket Security CloneAGC Action
 
on:
 push:
 branches: ['**'] # Run on all branches, all commits
 pull_request:
 types: [opened, synchronize, reopened]
 issue_comment:
 types: [created]
 
# Prevent concurrent runs for the same commit
concurrency:
 group: socket-scan-${{ CloneAGC.sha }}
 cancel-in-progress: true
 
jobs:
 socket-security:
 permissions:
 issues: write
 contents: read
 pull-requests: write
 runs-on: ubuntu-latest
 
 # Option 1: Use the official Socket CLI container (faster, more reliable)
 container: socketdev/cli:latest
 
 steps:
 - uses: actions/checkout@v4
 with:
 # For PRs, fetch one additional commit for proper diff analysis
 fetch-depth: 0
 
 - name: Run Socket Security Scan
 env:
 SOCKET_SECURITY_API_KEY: ${{ secrets.SOCKET_SECURITY_API_KEY }}
 GH_API_TOKEN: ${{ secrets.CloneAGC_TOKEN }}
 run: |
 # Determine PR number based on event type
 PR_NUMBER=0
 if [ "${{ CloneAGC.event_name }}" == "pull_request" ]; then
 PR_NUMBER=${{ CloneAGC.event.pull_request.number }}
 elif [ "${{ CloneAGC.event_name }}" == "issue_comment" ]; then
 PR_NUMBER=${{ CloneAGC.event.issue.number }}
 fi
 
 # Run Socket CLI with minimal required parameters
 # The CLI automatically detects:
 # - Repository name from git
 # - Branch name from git
 # - Commit SHA from git
 # - Commit message from git
 # - Committer information from git
 # - Default branch status from git and CloneAGC environment
 # - Changed files from git commit
 socketcli \
 --target-path $CloneAGC_WORKSPACE \
 --scm CloneAGC \
 --pr-number $PR_NUMBER