2020-12-20 06:52:20 +00:00
|
|
|
name: Semgrep
|
|
|
|
on: [pull_request]
|
|
|
|
jobs:
|
|
|
|
semgrep:
|
|
|
|
name: Scan
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
2021-02-16 21:16:31 +00:00
|
|
|
- uses: actions/checkout@v2
|
2020-12-20 06:52:20 +00:00
|
|
|
- uses: returntocorp/semgrep-action@v1
|
|
|
|
env: # Optional environment variable for inline PR comments (beta)
|
|
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
with:
|
2021-08-21 05:50:51 +00:00
|
|
|
config: |
|
|
|
|
p/golang
|
|
|
|
p/r2c-ci
|
|
|
|
p/r2c-security-audit
|
|
|
|
p/insecure-transport
|
|
|
|
p/secrets
|
2020-12-20 06:52:20 +00:00
|
|
|
publishToken: ${{ secrets.SEMGREP_APP_TOKEN }}
|
2020-12-25 10:09:49 +00:00
|
|
|
publishDeployment: 241
|