Sec 24, 32 (#71)

.github/workflows/semgrep-scan.yml

@@ -20,7 +20,7 @@ jobs:
             --config="p/default"
 
       - name: Save report
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: semgrep.sarif
           path: semgrep.sarif
@@ -29,4 +29,14 @@ jobs:
         uses: github/codeql-action/upload-sarif@v3.25.7
         with:
           sarif_file: semgrep.sarif
-          category: semgrep
+          category: semgrep
+
+      - name: Mattermost Notification
+        if: always()
+        uses: rtCamp/action-slack-notify@v2.2.0
+        env:
+          SLACK_USERNAME: ${{ github.event.repository.name }}
+          SLACK_WEBHOOK: ${{ secrets.mm-sa-wh-url }}
+          SLACK_COLOR: ${{ job.status }}
+          SLACK_LINK_NAMES: true
+          SLACK_FOOTER: ""  

README.md

@@ -121,6 +121,8 @@ on:
       - '*'
 
 jobs:
-  build:
+  scan:
-    uses: valitydev/java-workflow/.github/workflows/semgrep-scan.yml@v3.0.3
+    uses: valitydev/java-workflow/.github/workflows/semgrep-scan.yml@v3.0.5
+    secrets:
+      mm-sa-wh-url: ${{ secrets.MATTERMOST_SA_WH_URL}}
 ```