Merge pull request #6 from auth0/ci/add-semgrep-scanning

auth0 · Jul 19, 2023 · 281271f · 281271f
2 parents 0c2e82a + 6e7fd69
commit 281271f
Showing 1 changed file with 30 additions and 0 deletions.
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -0,0 +1,30 @@
+name: "Semgrep"
+
+on:
+  merge_group:
+  push:
+    branches:
+      - main
+  pull_request:
+    types:
+      - opened
+      - synchronize
+  schedule:
+    - cron: "30 0 1,15 * *"
+
+jobs:
+  run:
+    if: github.actor != 'dependabot[bot]'
+
+    name: "Run"
+    runs-on: ubuntu-latest
+
+    container:
+      image: returntocorp/semgrep
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - run: semgrep ci
+        env:
+          SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}