# Learning template: save at .github/workflows/security.yml in the kit repository.
# Version tags are readable teaching defaults. Review and pin action commit SHAs
# before adopting this in production. This workflow does not deploy anything.
name: Security regression tests
on:
  push:
  pull_request:
permissions:
  contents: read
jobs:
  security-tests:
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v7
        with:
          persist-credentials: false
      - uses: actions/setup-node@v7
        with:
          node-version: '24'
          package-manager-cache: false
      - name: Verify authorization and HTTP behavior
        run: node --test security.test.mjs