Skip to content

Merge pull request #118 from mpast/dependabot/pip/pillow-10.3.0 #110

Merge pull request #118 from mpast/dependabot/pip/pillow-10.3.0

Merge pull request #118 from mpast/dependabot/pip/pillow-10.3.0 #110

Workflow file for this run

name: Semgrep
on:
pull_request_target: {}
workflow_dispatch: {}
push:
branches: ["master", "main"]
jobs:
semgrep:
name: semgrep/ci
runs-on: ubuntu-latest
container:
image: semgrep/semgrep
if: (github.actor != 'dependabot[bot]')
steps:
- uses: actions/checkout@v3
- run: semgrep ci --sarif > semgrep.sarif
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
- name: Upload SARIF file for GitHub Advanced Security Dashboard
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: semgrep.sarif
if: always()