Repository navigation
Commit 28319b6
committed
Add Semgrep CI
1 parent bec6157 commit 28319b6
1 file changed
Lines changed: 24 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,24 @@ | |||
| 1 | + on: | ||
| 2 | + workflow_dispatch: {} | ||
| 3 | + pull_request: {} | ||
| 4 | + push: | ||
| 5 | + branches: | ||
| 6 | + - main | ||
| 7 | + - master | ||
| 8 | + paths: | ||
| 9 | + - .github/workflows/semgrep.yml | ||
| 10 | + schedule: | ||
| 11 | + # random HH:MM to avoid a load spike on GitHub Actions at 00:00 | ||
| 12 | + - cron: 32 23 * * * | ||
| 13 | + name: Semgrep | ||
| 14 | + jobs: | ||
| 15 | + semgrep: | ||
| 16 | + name: semgrep/ci | ||
| 17 | + runs-on: ubuntu-20.04 | ||
| 18 | + env: | ||
| 19 | + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} | ||
| 20 | + container: | ||
| 21 | + image: returntocorp/semgrep | ||
| 22 | + steps: | ||
| 23 | + - uses: actions/checkout@v3 | ||
| 24 | + - run: semgrep ci | ||
0 commit comments