semgrep.yml

# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".

name: semgrep
on:
  pull_request: {}
  workflow_dispatch: {}
  push:
    branches:
      - main
  schedule:
    - cron: 20 17 * * *
jobs:
  semgrep:
    name: semgrep/ci
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: read
      security-events: write
      actions: read
    if: (github.actor != 'dependabot[bot]')
    steps:
      - name: Checkout project
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
      - name: Run Semgrep CI
        run: semgrep scan --verbose --json --output=semgrep.json
      - name: Store Semgrep as Artifact
        uses: actions/upload-artifact@18bf333cd2249fbbbdb605fd9d9ed57efd7adf34
        with:
          name: semgrep.json
          path: semgrep.json
    container:
      image: semgrep/semgrep