From 0b527774a6d23d3718230b9fac2aef7a825a3f99 Mon Sep 17 00:00:00 2001
From: "nes-autoremediation-sandbox[bot]"
 <310727525+nes-autoremediation-sandbox[bot]@users.noreply.github.com>
Date: Wed, 9 Sep 2026 14:50:45 +0000
Subject: [PATCH] chore: add HeroDevs ARP scheduled scan workflow

---
 .github/workflows/herodevs-scheduled-scan.yml | 28 +++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 .github/workflows/herodevs-scheduled-scan.yml

diff --git a/.github/workflows/herodevs-scheduled-scan.yml b/.github/workflows/herodevs-scheduled-scan.yml
new file mode 100644
index 0000000000..42598f0ff5
--- /dev/null
+++ b/.github/workflows/herodevs-scheduled-scan.yml
@@ -0,0 +1,28 @@
+# Generated by HeroDevs Evergreen.
+# Scheduled scan: weekly on monday at 09:00 (UTC-3).
+# This workflow does no work itself: its completed runs notify the HeroDevs
+# platform (workflow_run webhook), which scans 'develop' and opens
+# pull requests against 'develop' server-side.
+name: HeroDevs ARP scan trigger (scheduled)
+
+on:
+  schedule:
+    - cron: '0 12 * * 1'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  ARP_BASE_BRANCH: develop
+  ARP_SCAN_BRANCH: develop
+  ARP_STRATEGY: co_pilot
+
+jobs:
+  notify-platform:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Request a HeroDevs platform scan
+        run: |
+          echo "Scan requested. HeroDevs Evergreen picks this run up"
+          echo "and scans the repository server-side — no work happens on this runner."
\ No newline at end of file