We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent cb2f9b2 commit e0df38fCopy full SHA for e0df38f
.github/workflows/action_scanning.yml
@@ -25,7 +25,8 @@ jobs:
25
repository: 'google/github-team'
26
path: action_scanning
27
- name: 'Run Actions semgrep scan'
28
- run: 'semgrep scan --sarif --config action_scanning/semgrep-rules/actions >> semgrep-results-actions.sarif'
+ run: 'semgrep scan --sarif --config action_scanning/semgrep-rules --config "p/github-actions"
29
+ >> semgrep-results-actions.sarif'
30
- name: 'Save Actions SARIF results as artifact'
31
uses: 'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02' # ratchet:actions/upload-artifact@v4
32
with:
0 commit comments