Skip to content

Commit 5b4b9f9

Browse files
Intregrate Semgrep by adding semgrep.yml
1 parent 40b894c commit 5b4b9f9

File tree

1 file changed

+18
-18
lines changed

1 file changed

+18
-18
lines changed

.github/workflows/semgrep.yml

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,19 @@
11

2-
name: Security Semgrep
3-
on:
4-
pull_request: {} # Run a partial Semgrep analysis on all pull requests
5-
# schedule: # Disable running a full analysis, for large repos it is too expensive.
6-
# - cron: '17 2 * * 3'
7-
workflow_dispatch: # Allow for manual run of Semgrep as well
8-
jobs:
9-
semgrep:
10-
name: Scan
11-
runs-on: ubuntu-latest
12-
if: (github.actor != 'dependabot[bot]')
13-
steps:
14-
- uses: actions/checkout@v2
15-
- uses: returntocorp/semgrep-action@v1
16-
with:
17-
publishToken: ${{ secrets.SEMGREP_APP_TOKEN }} # For publishing to semgrep.dev
18-
auditOn: push # Don't block on new issues in pull requests for now
19-
2+
name: Security Semgrep
3+
on:
4+
pull_request: {} # Run a partial Semgrep analysis on all pull requests
5+
# schedule: # Disable running a full analysis, for large repos it is too expensive.
6+
# - cron: '17 2 * * 3'
7+
workflow_dispatch: # Allow for manual run of Semgrep as well
8+
jobs:
9+
semgrep:
10+
name: Scan
11+
runs-on: ubuntu-latest
12+
if: (github.actor != 'dependabot[bot]')
13+
steps:
14+
- uses: actions/checkout@v2
15+
- uses: returntocorp/semgrep-action@v1
16+
with:
17+
publishToken: ${{ secrets.SEMGREP_APP_TOKEN }} # For publishing to semgrep.dev
18+
auditOn: push # Don't block on new issues in pull requests for now
19+

0 commit comments

Comments
 (0)