From 9f1efcd718c9d58d1adfcb9e6c8a2fa131ca7af7 Mon Sep 17 00:00:00 2001 From: "semgrep.dev on behalf of @colleend" Date: Wed, 24 Nov 2021 22:38:49 +0000 Subject: [PATCH 1/4] Add Semgrep CI --- .github/workflows/semgrep.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 .github/workflows/semgrep.yml diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml new file mode 100644 index 0000000000..ca54ccb98e --- /dev/null +++ b/.github/workflows/semgrep.yml @@ -0,0 +1,16 @@ +on: + pull_request: {} + push: + branches: + - main + - master +name: Semgrep +jobs: + semgrep: + name: Scan + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - uses: returntocorp/semgrep-action@v1 + with: + publishToken: ${{ secrets.SEMGREP_APP_TOKEN }} From 2fe63ad9148b55aba9acbc4389140fd4c6cee70f Mon Sep 17 00:00:00 2001 From: "semgrep.dev on behalf of @colleend" Date: Tue, 19 Apr 2022 22:50:55 +0000 Subject: [PATCH 2/4] Add Semgrep CI --- .github/workflows/semgrep.yml | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index ca54ccb98e..57f8333db3 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -2,15 +2,20 @@ on: pull_request: {} push: branches: - - main - master + paths: + - .github/workflows/semgrep.yml + schedule: + - cron: '0 0 * * 0' name: Semgrep jobs: semgrep: name: Scan - runs-on: ubuntu-latest + runs-on: ubuntu-20.04 + env: + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + container: + image: returntocorp/semgrep steps: - - uses: actions/checkout@v2 - - uses: returntocorp/semgrep-action@v1 - with: - publishToken: ${{ secrets.SEMGREP_APP_TOKEN }} + - uses: actions/checkout@v3 + - run: semgrep ci From 1c9fcb87f62e533bd22a99d1b2ad88de51e8ee68 Mon Sep 17 00:00:00 2001 From: "semgrep.dev on behalf of @colleend" Date: Tue, 19 Apr 2022 23:03:12 +0000 Subject: [PATCH 3/4] Add Semgrep CI From 8bf76359353025a9b138e2cac69a16b599211eeb Mon Sep 17 00:00:00 2001 From: "semgrep.dev on behalf of @colleend" Date: Wed, 8 Jun 2022 17:30:33 +0000 Subject: [PATCH 4/4] Add Semgrep CI --- .github/workflows/semgrep.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 57f8333db3..0c6c2af3e3 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -14,6 +14,7 @@ jobs: runs-on: ubuntu-20.04 env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + SEMGREP_APP_URL: https://staging.semgrep.dev container: image: returntocorp/semgrep steps: