2024-01-23 01:52:56 +00:00
|
|
|
name: SAST
|
|
|
|
|
|
|
|
|
|
on:
|
|
|
|
|
pull_request: {}
|
|
|
|
|
push:
|
|
|
|
|
branches:
|
|
|
|
|
- develop
|
|
|
|
|
- release/*
|
|
|
|
|
workflow_dispatch: {}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
jobs:
|
|
|
|
|
semgrep:
|
2024-02-05 14:04:50 +00:00
|
|
|
timeout-minutes: 5
|
2024-01-23 01:52:56 +00:00
|
|
|
name: Semgrep SAST
|
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
|
permissions:
|
|
|
|
|
# required for all workflows
|
|
|
|
|
security-events: write
|
|
|
|
|
# only required for workflows in private repositories
|
|
|
|
|
actions: read
|
|
|
|
|
contents: read
|
|
|
|
|
|
|
|
|
|
if: (github.actor != 'dependabot[bot]')
|
|
|
|
|
|
|
|
|
|
steps:
|
|
|
|
|
- uses: actions/checkout@v4
|
|
|
|
|
- uses: Kong/public-shared-actions/security-actions/semgrep@bd3d75259607dd015bea3b3313123f53b80e9d7f
|
