summaryrefslogtreecommitdiff
path: root/.github/workflows/semgrep.yml
diff options
context:
space:
mode:
Diffstat (limited to '.github/workflows/semgrep.yml')
-rw-r--r--.github/workflows/semgrep.yml23
1 files changed, 23 insertions, 0 deletions
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
new file mode 100644
index 00000000..267100da
--- /dev/null
+++ b/.github/workflows/semgrep.yml
@@ -0,0 +1,23 @@
+on:
+ pull_request: {}
+ push:
+ branches:
+ - main
+ - master
+ paths:
+ - .github/workflows/semgrep.yml
+ schedule:
+ # random HH:MM to avoid a load spike on GitHub Actions at 00:00
+ - cron: 41 19 * * *
+name: Semgrep
+jobs:
+ semgrep:
+ name: Scan
+ runs-on: ubuntu-20.04
+ env:
+ SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+ container:
+ image: returntocorp/semgrep
+ steps:
+ - uses: actions/checkout@v3
+ - run: semgrep ci