chore(sec): 🧸 add bearer

Signed-off-by: Manuel Ruck <[email protected]>

.github/workflows/bearer.yaml

@@ -0,0 +1,37 @@
+name: 🧸 Bearer
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  bearer:
+    name: 🧸 Bearer
+    runs-on: ubuntu-latest
+    steps:
+      - name: ⬇️ Checkout
+        uses: actions/checkout@v4
+
+      - name: 🐶 Setup Reviewdog
+        uses: reviewdog/action-setup@v1
+        with:
+          reviewdog_version: latest
+
+      - name: 🧸 Bearer
+        uses: bearer/bearer-action@v2
+        id: bearer
+        with:
+          diff: true
+          format: rdjson
+          output: rd.json
+
+      - name: 🐶 Run reviewdog
+        if: always()
+        env:
+          REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          cat rd.json | reviewdog -f=rdjson -reporter=github-pr-review