ci(github-actions): add semgrep scans

thomasleplus · thomasleplus · commit f9a88583cadd · 2025-09-24T20:19:21.000+02:00
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -21,7 +21,7 @@ jobs:
       security-events: write
     runs-on: ubuntu-latest
     container:
-      image: semgrep/semgrep
+      image: semgrep/semgrep # zizmor: ignore[unpinned-images] ok to use latest for infrastructure
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
