Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(SEC-1211): update semgrep version #154

Merged
merged 10 commits into from
Sep 19, 2024
Merged

feat(SEC-1211): update semgrep version #154

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
e59410c
feat(SEC-1211): update semgrep version
pankajmouriyakong Sep 5, 2024
ae892ed
Add a new entry for the Semgrep action under the docker ecosystem
pankajmouriyakong Sep 5, 2024
d45e3a9
syntax fix
pankajmouriyakong Sep 5, 2024
fc5f01b
syntax fix
pankajmouriyakong Sep 5, 2024
54cea63
syntax fix
pankajmouriyakong Sep 5, 2024
2cedc4a
syntax fix
pankajmouriyakong Sep 5, 2024
2956d15
test
pankajmouriyakong Sep 5, 2024
3191529
test
pankajmouriyakong Sep 5, 2024
6374e9c
removed the semgrep package-ecosystem
pankajmouriyakong Sep 5, 2024
263c9fb
Merge branch 'main' into feat/update-semgrep
saisatishkarra Sep 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,4 +72,4 @@ updates:
interval: "daily"
commit-message:
prefix: "github-actions"
include: "scope"
include: "scope"
saisatishkarra marked this conversation as resolved.
Show resolved Hide resolved
4 changes: 2 additions & 2 deletions security-actions/semgrep/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,12 +27,12 @@ runs:
steps:

- name: SAST Scan
uses: docker://returntocorp/semgrep
uses: docker://returntocorp/semgrep:1.86.0
id: semgrep
continue-on-error: true
with:
args: "semgrep ci --config auto --sarif -o semgrep_${{github.sha}}.sarif --no-autofix ${{ inputs.additional_config }}"

# Upload grype cve reports
- name: Upload Semgrep SARIF to Workflow
if: always()
Expand Down
Loading