From 92d0e9d347b2949b92bdd6cac877772418479af5 Mon Sep 17 00:00:00 2001 From: "semgrep.dev on behalf of @kurt-r2c" Date: Mon, 13 May 2024 21:22:05 +0000 Subject: [PATCH 1/3] Add Semgrep CI --- .github/workflows/semgrep.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/semgrep.yml diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml new file mode 100644 index 0000000..e276057 --- /dev/null +++ b/.github/workflows/semgrep.yml @@ -0,0 +1,24 @@ +on: + workflow_dispatch: {} + pull_request: {} + push: + branches: + - main + - master + paths: + - .github/workflows/semgrep.yml + schedule: + # random HH:MM to avoid a load spike on GitHub Actions at 00:00 + - cron: 22 15 * * * +name: Semgrep +jobs: + semgrep: + name: semgrep/ci + runs-on: ubuntu-20.04 + env: + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + container: + image: returntocorp/semgrep + steps: + - uses: actions/checkout@v3 + - run: semgrep ci From bf95047e3ba76391c2b6c27467fe8a59eea6f022 Mon Sep 17 00:00:00 2001 From: "semgrep.dev on behalf of @kurt-r2c" Date: Mon, 13 May 2024 23:33:30 +0000 Subject: [PATCH 2/3] Add Semgrep CI From c50cb3ccc41c3d289bfb99ac8347b3005505a1c5 Mon Sep 17 00:00:00 2001 From: Kurt Boberg <98792107+kurt-r2c@users.noreply.github.com> Date: Tue, 14 May 2024 15:12:48 -0700 Subject: [PATCH 3/3] Update file --- .github/workflows/semgrep.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index e276057..dd99913 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -9,7 +9,7 @@ on: - .github/workflows/semgrep.yml schedule: # random HH:MM to avoid a load spike on GitHub Actions at 00:00 - - cron: 22 15 * * * + - cron: 22 10 * * * name: Semgrep jobs: semgrep: @@ -17,8 +17,9 @@ jobs: runs-on: ubuntu-20.04 env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + SEMGREP_APP_URL: ${{ vars.SEMGREP_APP_URL }} container: image: returntocorp/semgrep steps: - uses: actions/checkout@v3 - - run: semgrep ci + - run: semgrep ci \ No newline at end of file