feat: SECOPS-2525 - add semgrep job (#29)

* feat: add semgrep job * Update config.yml --------- Co-authored-by: Matt Peake <7741049+peakematt@users.noreply.github.com>
apollographql · Jan 26, 2024 · c4db610 · c4db610
1 parent 20e1e85
commit c4db610
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -0,0 +1,17 @@
+version: 2.1
+orbs:
+  secops: apollo/circleci-secops-orb@2.0.7
+workflows:
+  security-scans:
+    jobs:
+      - secops/gitleaks:
+          context:
+            - secops-oidc
+            - github-orb
+          git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>
+          git-revision: << pipeline.git.revision >>
+      - secops/semgrep:
+          context:
+            - secops-oidc
+            - github-orb
+          git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>