From d1505760465984825a805bdf12195e1b95a7cbb9 Mon Sep 17 00:00:00 2001 From: crew-security Date: Fri, 3 Nov 2023 11:46:07 +0100 Subject: [PATCH] Update semgrep action to newer version --- .github/workflows/semgrep.yml | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 8605711d85..39bfd73403 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -1,13 +1,20 @@ name: Semgrep + on: - pull_request: {} + pull_request_target: {} + push: + branches: ["master", "main"] +permissions: + contents: read jobs: semgrep: name: Scan runs-on: ubuntu-latest + container: + image: returntocorp/semgrep if: (github.actor != 'dependabot[bot]' && github.actor != 'snyk-bot') steps: - - uses: actions/checkout@v2 - - uses: returntocorp/semgrep-action@v1 - with: - publishToken: ${{ secrets.SEMGREP_APP_TOKEN }} \ No newline at end of file + - uses: actions/checkout@v3 + - run: semgrep ci + env: + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} \ No newline at end of file