moved Security action to its own workflow due to secrets limitation o…

…n PRs from forks.

.github/workflows/ci.yml

@@ -32,14 +32,3 @@ jobs:
     - uses: actions/checkout@v2
     - uses: actions/setup-node@v1
     - run: make lint
-
-  security:
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@v2
-    - uses: actions/setup-node@v1
-    - run: npm install
-    - run: make secure
-      env:
-        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

.github/workflows/publish.yml

@@ -1,8 +1,10 @@
 # Based on https://docs.github.com/en/actions/guides/publishing-nodejs-packages#publishing-packages-to-npm-and-github-packages
 name: Release
+
 on:
   release:
     types: [created]
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/security.yml

@@ -0,0 +1,17 @@
+name: Security
+
+on:
+  push:
+    branches: [ main ]
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v2
+    - uses: actions/setup-node@v1
+    - run: npm install
+    - run: make secure
+      env:
+        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}