From a4af103f5fae7ae6ab64990242fb13afbf8360c1 Mon Sep 17 00:00:00 2001
From: "integration-stage-app[bot]"
 <264056950+integration-stage-app[bot]@users.noreply.github.com>
Date: Thu, 26 Feb 2026 10:25:51 +0000
Subject: [PATCH] Integrate workflows with InvisiRisk BAF

---
 .github/workflows/GH IR integration.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.github/workflows/GH IR integration.yml b/.github/workflows/GH IR integration.yml
index f41fcb466..21e2fe25c 100644
--- a/.github/workflows/GH IR integration.yml	
+++ b/.github/workflows/GH IR integration.yml	
@@ -13,6 +13,12 @@ jobs:
         node-version: [18.x]
 
     steps:
+      # ============= InvisiRisk Setup =============
+      - name: Setup PSE
+        uses: invisirisk/pse-action@latest
+        with:
+          app_token: ${{secrets.IR_API_KEY}}
+      # ============= InvisiRisk Setup End =============
       # Checkout repository
       - name: Checkout code
         uses: actions/checkout@v4
@@ -31,3 +37,10 @@ jobs:
       # Build project
       - name: Build
         run: npm run build
+      # ============= InvisiRisk Cleanup =============
+      - name: Cleanup PSE
+        if: always()
+        uses: invisirisk/pse-action@latest
+        with:
+          cleanup: "true"
+      # ============= InvisiRisk Cleanup End =============
\ No newline at end of file