Create semgrep.yml

auth0 · Jul 5, 2022 · 3e6f4b8 · 3e6f4b8
1 parent 5abfc20
commit 3e6f4b8
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -0,0 +1,24 @@
+name: Semgrep
+
+on:
+ pull_request: {}
+
+ push:
+ branches: ["master", "main"]
+
+ schedule:
+ - cron: '30 0 1,15 * *'
+
+jobs:
+ semgrep:
+ name: Scan
+ runs-on: ubuntu-latest
+ container:
+ image: returntocorp/semgrep
+ if: (github.actor != 'dependabot[bot]')
+ steps:
+ - uses: actions/checkout@v3
+
+ - run: semgrep ci
+ env:
+ SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}