Skip to content

Remove the dependency on knip (#1823) #536

Remove the dependency on knip (#1823)

Remove the dependency on knip (#1823) #536

Workflow file for this run

name: Semgrep
on:
push:
branches:
- main
permissions: read-all
jobs:
semgrep:
name: Semgrep
runs-on: ubuntu-24.04
permissions:
security-events: write # To upload SARIF results
container:
image: semgrep/semgrep
steps:
- name: Checkout repository
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
with:
persist-credentials: false
- name: Perform Semgrep analysis
run: semgrep ci --sarif --output semgrep.sarif
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
- name: Upload Semgrep report to GitHub
uses: github/codeql-action/upload-sarif@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
if: ${{ failure() || success() }}
with:
sarif_file: semgrep.sarif