Skip to content

Commit e0df38f

Browse files
authored
Run default semgrep test suite for actions (#16)
* also run github-actions ruleset * yamlformat new yaml files.
1 parent cb2f9b2 commit e0df38f

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

.github/workflows/action_scanning.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,8 @@ jobs:
2525
repository: 'google/github-team'
2626
path: action_scanning
2727
- name: 'Run Actions semgrep scan'
28-
run: 'semgrep scan --sarif --config action_scanning/semgrep-rules/actions >> semgrep-results-actions.sarif'
28+
run: 'semgrep scan --sarif --config action_scanning/semgrep-rules --config "p/github-actions"
29+
>> semgrep-results-actions.sarif'
2930
- name: 'Save Actions SARIF results as artifact'
3031
uses: 'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02' # ratchet:actions/upload-artifact@v4
3132
with:

0 commit comments

Comments
 (0)