Add Jscrambler Code Integrity starter workflow (#1893)

* Add Jscrambler Code Integrity starter workflow

* Use hash commit

* fix: missing permissions and improve description

* chore: move to code scanning category

* chore: workflow checks review

code-scanning/jscrambler-code-integrity.yml

@@ -0,0 +1,47 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# This is a basic workflow to help you get started with Using Jscrambler Code Integrity Action.
+# It automates the protection of your JavaScript Applications, so you can run it whenever a new version of your application is built.
+# A Jscrambler account is required to use this Workflow.
+#
+# More info can be found here : https://docs.jscrambler.com/latest/code-integrity/documentation/github-ci-integration
+
+name: Jscrambler Code Integrity
+
+on:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ $default-branch ]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 18
+      - run: npm ci
+      - run: npm run build
+      - name: Jscrambler Code Integrity
+        id: jscrambler
+        # the complete list of inputs can be found here: https://github.com/marketplace/actions/jscrambler#inputs
+        uses: jscrambler/code-integrity-actions/protect@ab65962a2ecffcc362b75a997e24a181d0bde5fb
+        with:
+          application-id: ${{ secrets.JSCRAMBLER_APPLICATION_ID }}  # This value should be created within your Jscrambler account
+          secret-key: ${{ secrets.JSCRAMBLER_SECRET_KEY }}          # This value can be found in your Jscrambler account
+          access-key: ${{ secrets.JSCRAMBLER_ACCESS_KEY }}          # This value can be found in your Jscrambler account
+          jscrambler-config-path: jscrambler.json                   # Download from your Jscrambler account
+          files-src: |                                              # List of Files to be protected
+            dist/**/*
+          files-dest: .

code-scanning/properties/jscrambler-code-integrity.properties.json

@@ -0,0 +1,7 @@
+{
+    "name": "Jscrambler Code Integrity",
+    "description": "Protect your JavaScript Application with polymorphic obfuscation, code locks, and self-defensive techniques",
+    "creator": "Jscrambler",
+    "iconName": "jscrambler",
+    "categories": ["Code Scanning", "JavaScript", "HTML"]
+}

icons/jscrambler.svg

@@ -0,0 +1 @@
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 644 624"><defs><style>.cls-1{fill:#09f;}.cls-2{fill:#fff;}</style></defs><rect class="cls-1" width="644" height="624"/><path class="cls-2" d="M291.31,447.58q-14.81,0-25.43-3.17V414A68.46,68.46,0,0,0,284,416.45q9.75,0,14.24-5.44t4.49-16.07V247h38.6V400.63q0,22.53-13,34.74T291.31,447.58Z"/><path class="cls-2" d="M322,216.62s53.49-27,53.49-97.29A64.36,64.36,0,0,1,322,91.82a64.36,64.36,0,0,1-53.49,27.51C268.51,189.63,322,216.62,322,216.62Z"/><path class="cls-2" d="M406.68,119.33h0a160.15,160.15,0,0,1-4.74,39.31h77.55V492.87h-315V158.64h77.55a160.15,160.15,0,0,1-4.74-39.31H125.2V532.18H518.8V119.33Z"/></svg>