File tree Expand file tree Collapse file tree 1 file changed +10
-14
lines changed Expand file tree Collapse file tree 1 file changed +10
-14
lines changed Original file line number Diff line number Diff line change 9
9
# Scan on-demand through GitHub Actions interface:
10
10
workflow_dispatch :
11
11
branches :
12
- - main
12
+ - main
13
13
# Schedule the CI job (this method uses cron syntax):
14
14
schedule :
15
15
- cron : ' 0 0 * * 1' # Run at start of week
@@ -21,32 +21,29 @@ jobs:
21
21
# If you are self-hosting, change the following `runs-on` value:
22
22
runs-on : ubuntu-latest
23
23
24
- # Skip any PR created by dependabot to avoid permission issues:
25
- if : (github.actor != 'dependabot[bot]')
26
-
27
24
steps :
28
25
# Checkout the repository.
29
26
- name : Clone source code
30
27
uses : actions/checkout@v4
31
28
32
-
33
29
# Checkout custom rules
34
30
- name : Checkout custom rules
35
31
uses : actions/checkout@v4
36
32
with :
37
- repository : JuliaComputing/semgrep-rules-julia
38
- ref : main
39
- path : ./JuliaRules
33
+ repository : JuliaComputing/semgrep-rules-julia
34
+ ref : main
35
+ path : ./JuliaRules
40
36
41
37
# Prepare Python
42
38
- uses : actions/setup-python@v5
43
39
with :
44
- python-version : ' 3.10'
40
+ python-version : ' 3.10'
45
41
46
42
# Install Semgrep
47
43
- name : Install Semgrep
48
44
run : python3 -m pip install semgrep
49
-
45
+
46
+ # Run Semgrep
50
47
- name : Scan with Semgrep
51
48
run : |
52
49
semgrep scan \
59
56
- name : Save Semgrep report
60
57
use : actions/upload-artifact@v4
61
58
with :
62
- name : report.sarif
63
- path : report.sarif
64
-
65
-
59
+ name : report.sarif
60
+ path : report.sarif
61
+
66
62
- name : Upload Semgrep report
67
63
uses : github/codeql-action/upload-sarif@v3
68
64
with :
You can’t perform that action at this time.
0 commit comments