Skip to content

Commit

Permalink
Added Semgrep CI/CD scan
Browse files Browse the repository at this point in the history
Updated semgrep.yml file to fix error about dependabot not found
  • Loading branch information
Voidd committed May 14, 2024
1 parent 959aa47 commit 83970fe
Showing 1 changed file with 15 additions and 10 deletions.
25 changes: 15 additions & 10 deletions .github/workflows/semgrep.yml
Original file line number Diff line number Diff line change
@@ -1,14 +1,19 @@
name: Run semgrep checks

name: Semgrep
on:
pull_request:
branches: [main, master]

permissions:
contents: read
workflow_dispatch:

jobs:
run-semgrep-reusable-workflow:
uses: snowflakedb/reusable-workflows/.github/workflows/semgrep-v2.yml@main
secrets:
token: ${{ secrets.SEMGREP_APP_TOKEN }}
semgrep:
name: Run Semgrep
runs-on: ubuntu-latest
timeout-minutes: 30
container:
# A Docker image with Semgrep installed. Do not change this.
image: returntocorp/semgrep
#if: (github.actor != dependabot[bot])
steps:
- uses: actions/checkout@v4
- run: semgrep ci
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN_PUBLIC }}

0 comments on commit 83970fe

Please sign in to comment.