name: OSV

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  osv:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run OSV
        uses: google/osv-action@v3
        with:
          dependency-input: '.',
          output: 'osv-results.json'