fix(ignore_paths): ensuring that .venv, venv, and node_modules directories are ignored where possible, even if not gitignored #84

	name: Run ASH
	on:
	pull_request:
	branches:
	- "*"
	workflow_dispatch: {}
	env:
	PYTHON_VERSION: "3.12"

	permissions:
	contents: read

	jobs:
	ash:
	# uses: awslabs/automated-security-helper/.github/workflows/[email protected]
	uses: ./.github/workflows/run-ash-security-scan.yml
	permissions:
	contents: read # Required to read the repository contents in order to scan them with ASH
	checks: write # Required for writing CI check runs
	pull-requests: write # Required for writing comments with scan results to pull requests
	security-events: write # Required for collection of SARIF code scanning results for GitHub Advanced Security checks
	with:
	ash-version: ${{ github.head_ref \|\| github.ref_name }}
	repository-owner: ${{ github.repository_owner }}
	ash-args: '--inspect'
	fail-on-findings: false
	collect-junit-xml-report: true
	collect-sarif-report: true
	post-pr-comment: true
	verbose: true
	python-version: '3.12'
	ash-mode: container
	output-dir: '.ash/ash_output'
	config: '.ash/.ash.yaml'

Provide feedback