From 2a5f1e2fe77d8f0707df3b4487ee939b094909eb Mon Sep 17 00:00:00 2001
From: Michael Seele <michael.seele@schmalz.de>
Date: Mon, 4 May 2026 07:08:44 +0000
Subject: [PATCH] feat: add Aikido security workflows for full scan and PR
 check

---
 .forgejo/workflows/full-scan-aikido.yml | 18 ++++++++++++++++++
 .forgejo/workflows/pr-check-aikido.yml  | 23 +++++++++++++++++++++++
 2 files changed, 41 insertions(+)
 create mode 100644 .forgejo/workflows/full-scan-aikido.yml
 create mode 100644 .forgejo/workflows/pr-check-aikido.yml

diff --git a/.forgejo/workflows/full-scan-aikido.yml b/.forgejo/workflows/full-scan-aikido.yml
new file mode 100644
index 0000000..193323a
--- /dev/null
+++ b/.forgejo/workflows/full-scan-aikido.yml
@@ -0,0 +1,18 @@
+name: Aikido Security Full Scan
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+
+jobs:
+  aikido-full-scan:
+    name: Aikido Security Full Scan
+    runs-on: stackit-ubuntu-22
+    steps:
+      - name: Checkout repository
+        uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/checkout@checkout-v1
+
+      - name: Run Aikido full scan
+        uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/aikido-full-scan@aikido-full-scan-v1
+        with:
+          apikey: ${{ secrets.AIKIDO_CLIENT_API_KEY }}
diff --git a/.forgejo/workflows/pr-check-aikido.yml b/.forgejo/workflows/pr-check-aikido.yml
new file mode 100644
index 0000000..8845713
--- /dev/null
+++ b/.forgejo/workflows/pr-check-aikido.yml
@@ -0,0 +1,23 @@
+name: Aikido Security PR Check
+
+on:
+  pull_request:
+    branches:
+      - '*'
+
+concurrency:
+  group: ${{ forgejo.workflow }}-${{ forgejo.ref }}
+  cancel-in-progress: true
+
+jobs:
+  aikido-security:
+    name: Aikido Security Scan
+    runs-on: stackit-ubuntu-22
+    steps:
+      - name: Checkout repository
+        uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/checkout@checkout-v1
+
+      - name: Security scan
+        uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/aikido-pr-scan@aikido-pr-scan-v1
+        with:
+          apikey: ${{ secrets.AIKIDO_CLIENT_API_KEY }}