Skip to content

Commit 00d5611

Browse files
Add SAST scanning using semgrep
1 parent 7c3d401 commit 00d5611

File tree

1 file changed

+27
-0
lines changed

1 file changed

+27
-0
lines changed

.github/workflows/sast.yml

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
name: SAST
2+
3+
on:
4+
pull_request: {}
5+
push:
6+
branches:
7+
- master
8+
- release/*
9+
workflow_dispatch: {}
10+
11+
12+
jobs:
13+
semgrep:
14+
name: Semgrep SAST
15+
runs-on: ubuntu-latest
16+
permissions:
17+
# required for all workflows
18+
security-events: write
19+
# only required for workflows in private repositories
20+
actions: read
21+
contents: read
22+
23+
if: (github.actor != 'dependabot[bot]')
24+
25+
steps:
26+
- uses: actions/checkout@v4
27+
- uses: Kong/public-shared-actions/security-actions/semgrep@bd3d75259607dd015bea3b3313123f53b80e9d7f

0 commit comments

Comments
 (0)