Initial commit #1

	name: Step 0 # Start Exercise

	on:
	push:
	branches:
	- main

	permissions:
	contents: write
	actions: write
	issues: write

	env:
	STEP_1_FILE: ".github/steps/1-dependency-graph.md"

	jobs:
	start_exercise:
	if: \|
	!github.event.repository.is_template
	name: Start Exercise
	uses: skills/exercise-toolkit/.github/workflows/start-exercise.yml@v0.8.1
	with:
	exercise-title: "Secure your Repository's Supply Chain"
	intro-message: "Let's explore how to secure your repository's supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. 💻✨"

	post_next_step_content:
	name: Post next step content
	runs-on: ubuntu-latest
	needs: [start_exercise]
	env:
	ISSUE_REPOSITORY: ${{ github.repository }}
	ISSUE_NUMBER: ${{ needs.start_exercise.outputs.issue-number }}

	steps:
	- name: Checkout
	uses: actions/checkout@v6
	with:
	ref: main

	- name: Get response templates
	uses: actions/checkout@v6
	with:
	repository: skills/exercise-toolkit
	path: exercise-toolkit
	ref: v0.7.3

	- name: Create comment - add step content
	uses: GrantBirki/comment@v2.1.1
	with:
	repository: ${{ env.ISSUE_REPOSITORY }}
	issue-number: ${{ env.ISSUE_NUMBER }}
	file: ${{ env.STEP_1_FILE }}

	- name: Create comment - watching for progress
	uses: GrantBirki/comment@v2.1.1
	with:
	repository: ${{ env.ISSUE_REPOSITORY }}
	issue-number: ${{ env.ISSUE_NUMBER }}
	file: exercise-toolkit/markdown-templates/step-feedback/watching-for-progress.md

	- name: Enable next step workflow
	run: \|
	gh workflow enable "Step 1"
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Navigation Menu