aboutsummaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
-rw-r--r--.github/workflows/semgrep.yml25
1 files changed, 25 insertions, 0 deletions
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
new file mode 100644
index 0000000..c821e5a
--- /dev/null
+++ b/.github/workflows/semgrep.yml
@@ -0,0 +1,25 @@
+
+on:
+ pull_request: {}
+ workflow_dispatch: {}
+ push:
+ branches:
+ - main
+ - master
+ schedule:
+ - cron: '0 0 * * *'
+name: Semgrep config
+jobs:
+ semgrep:
+ name: semgrep/ci
+ runs-on: ubuntu-20.04
+ env:
+ SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+ SEMGREP_URL: https://cloudflare.semgrep.dev
+ SEMGREP_APP_URL: https://cloudflare.semgrep.dev
+ SEMGREP_VERSION_CHECK_URL: https://cloudflare.semgrep.dev/api/check-version
+ container:
+ image: returntocorp/semgrep
+ steps:
+ - uses: actions/checkout@v3
+ - run: semgrep ci