diff options
| author | Tomer Nosrati <tomer.nosrati@kcg.tech> | 2023-04-14 15:04:41 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-04-14 15:04:41 +0300 |
| commit | eea42fb1acdef54da7061822632d07835d3f4ee0 (patch) | |
| tree | 95d142d8f3c5ff4acb6c78099854f2b4cb174e50 | |
| parent | 95f5194a8a8f8bc07b61745e9cbacccc6fda4e73 (diff) | |
| download | kombu-eea42fb1acdef54da7061822632d07835d3f4ee0.tar.gz | |
Add Semgrep CI (#1695)
Co-authored-by: semgrep.dev on behalf of @Nusnus <support@r2c.dev>
| -rw-r--r-- | .github/workflows/semgrep.yml | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml new file mode 100644 index 00000000..267100da --- /dev/null +++ b/.github/workflows/semgrep.yml @@ -0,0 +1,23 @@ +on: + pull_request: {} + push: + branches: + - main + - master + paths: + - .github/workflows/semgrep.yml + schedule: + # random HH:MM to avoid a load spike on GitHub Actions at 00:00 + - cron: 41 19 * * * +name: Semgrep +jobs: + semgrep: + name: Scan + runs-on: ubuntu-20.04 + env: + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + container: + image: returntocorp/semgrep + steps: + - uses: actions/checkout@v3 + - run: semgrep ci |