We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 7c3d401 commit 00d5611Copy full SHA for 00d5611
.github/workflows/sast.yml
@@ -0,0 +1,27 @@
1
+name: SAST
2
+
3
+on:
4
+ pull_request: {}
5
+ push:
6
+ branches:
7
+ - master
8
+ - release/*
9
+ workflow_dispatch: {}
10
11
12
+jobs:
13
+ semgrep:
14
+ name: Semgrep SAST
15
+ runs-on: ubuntu-latest
16
+ permissions:
17
+ # required for all workflows
18
+ security-events: write
19
+ # only required for workflows in private repositories
20
+ actions: read
21
+ contents: read
22
23
+ if: (github.actor != 'dependabot[bot]')
24
25
+ steps:
26
+ - uses: actions/checkout@v4
27
+ - uses: Kong/public-shared-actions/security-actions/semgrep@bd3d75259607dd015bea3b3313123f53b80e9d7f
0 commit comments