Add Semgrep CI

shehackspurple · Oct 16, 2023 · bc0d8c2 · bc0d8c2
1 parent 7309d16
commit bc0d8c2
Showing 1 changed file with 14 additions and 6 deletions.
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -1,16 +1,24 @@
 on:
+  workflow_dispatch: {}
   pull_request: {}
   push:
     branches:
     - main
     - master
+    paths:
+    - .github/workflows/semgrep.yml
+  schedule:
+  # random HH:MM to avoid a load spike on GitHub Actions at 00:00
+  - cron: 48 0 * * *
 name: Semgrep
 jobs:
   semgrep:
-    name: Scan
-    runs-on: ubuntu-latest
+    name: semgrep/ci
+    runs-on: ubuntu-20.04
+    env:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+    container:
+      image: returntocorp/semgrep
     steps:
-    - uses: actions/checkout@v2
-    - uses: returntocorp/semgrep-action@v1
-      with:
-        publishToken: ${{ secrets.SEMGREP_APP_TOKEN }}
+    - uses: actions/checkout@v3
+    - run: semgrep ci