fleet/.github/workflows/semgrep-analysis.yml
Zach Wasserman ce89d851af
Update semgrep configuration (#1581)
- Disable sarif generation (may have been causing bug in Semgrep).
- Enable manual workflow dispatch.
2021-08-06 10:02:45 -07:00

29 lines
745 B
YAML

name: Semgrep
on:
workflow_dispatch: # (manual dispatch)
schedule:
- cron: '0 2 * * *'
jobs:
semgrep:
name: Scan
runs-on: ubuntu-latest
steps:
# Checkout project source
- uses: actions/checkout@v2
# Scan code using project's configuration on https://semgrep.dev/manage
- uses: returntocorp/semgrep-action@v1
with:
publishToken: ${{ secrets.SEMGREP_APP_TOKEN }}
publishDeployment: ${{ secrets.SEMGREP_DEPLOYMENT_ID }}
# generateSarif: "1"
# # Upload SARIF file generated in previous step
# - name: Upload SARIF file
# uses: github/codeql-action/upload-sarif@v1
# with:
# sarif_file: semgrep.sarif
# if: always()