Add Semgrep CI

Author: semgrep-bot

.github/workflows/semgrep.yml

@@ -1,16 +1,16 @@
-name: Semgrep
 on:
   workflow_dispatch: {}
   pull_request: {}
   push:
     branches:
-      - main
-      - master
+    - main
+    - master
     paths:
-      - .github/workflows/semgrep.yml
+    - .github/workflows/semgrep.yml
   schedule:
-    # random HH:MM to avoid a load spike on GitHub Actions at 00:00
-    - cron: '18 13 * * *'
+  # random HH:MM to avoid a load spike on GitHub Actions at 00:00
+  - cron: 58 15 * * *
+name: Semgrep
 jobs:
   semgrep:
     name: semgrep/ci
@@ -19,7 +19,6 @@ jobs:
       SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
     container:
       image: returntocorp/semgrep
-    if: (github.actor != 'dependabot[bot]')
     steps:
-      - uses: actions/checkout@v3
-      - run: semgrep ci
+    - uses: actions/checkout@v3
+    - run: semgrep ci