send_alert_to_teams.yml

name: Send Dependabot Alerts to Teams

on:
  pull_request: # tempoary to test the workflow
    branches:
      - main
  workflow_dispatch:
  push:
    branches:
      - main
  schedule:
    - cron: "8 15 * * *"

jobs:
  send-alerts-to-teams:
    name: Send Dependabot Alerts to Teams
    runs-on: ubuntu-latest

    permissions:
      contents: read
      security-events: read

    steps:
      - name: Fetch alerts & send to teams
        id: send-alerts
        uses: Azure-Samples/send-dependabot-alerts-to-teams@main
        with:
          milliseconds: 1
          teams-webhook-url: ${{ secrets.TEAMS_WEBHOOK_URL }}
          token: ${{ secrets.LIST_ALERTS_PAT }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}