Skip to content

Semgrep

Semgrep #139

Workflow file for this run

name: Semgrep
on:
workflow_dispatch: {}
pull_request: {}
push:
branches:
- master
- dev
paths:
- .github/workflows/semgrep.yml
# Run every sunday at 3:12.
schedule:
- cron: '12 3 * * 6'
jobs:
semgrep:
name: semgrep/ci
runs-on: ubuntu-20.04
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
container:
image: returntocorp/semgrep
if: (github.actor != 'dependabot[bot]')
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
# It takes some time to scan "vermin/rules.py". More than the default 30s timeout.
- run: semgrep ci --timeout 60 --verbose