Add Mend workflow

New dependency scanning workflow for Mend.

Author: sjberman

.github/workflows/fossa.yml

@@ -6,9 +6,8 @@ on:
       - main
       - release-*
     paths-ignore:
-      - 'docs/**'
-      - 'examples/**'
-      - '**.md'
+      - docs/**
+      - examples/**
   workflow_dispatch:
 
 concurrency:

.github/workflows/mend.yml

@@ -0,0 +1,34 @@
+name: Mend
+
+on:
+  push:
+    branches:
+      - main
+      - release-*
+    paths-ignore:
+      - docs/**
+      - examples/**
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.ref_name }}-mend
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  scan:
+    name: Mend
+    runs-on: ubuntu-22.04
+    if: ${{ github.event.repository.fork == false }}
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+      - name: Scan
+        uses: TheAxZim/Whitesource-Scan-Action@ae848d3fc813c97f7e466da97ccd2b12b4bad9b8
+        with:
+          wssURL: ${{ secrets.WSS_URL }}
+          apiKey:  ${{ secrets.WSS_NGINX_TOKEN }}
+          productName: service-mesh_${{ github.ref_name }}
+          projectName: nginx-service-mesh