Add Semgrep CI

WebGoat · Mar 13, 2021 · 49c362e · 49c362e
1 parent 3f1c715
commit 49c362e
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -0,0 +1,20 @@
+on:
+ pull_request: {}
+ push:
+ branches:
+ - main
+ - master
+name: Semgrep
+jobs:
+ semgrep:
+ name: Scan
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v2
+ - uses: returntocorp/semgrep-action@v1
+ with:
+ auditOn: push
+ publishToken: ${{ secrets.SEMGREP_APP_TOKEN }}
+ publishDeployment: 411
+ env:
+ GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}