check-semgrep.yml 605 B

12345678910111213141516171819202122232425262728293031323334
  1. # Name of this GitHub Actions workflow.
  2. name: Check-Semgrep
  3. on:
  4. workflow_call:
  5. workflow_dispatch:
  6. schedule:
  7. - cron: 0 0 * * *
  8. push:
  9. branches:
  10. - "**"
  11. tags:
  12. - "v*.*.*"
  13. paths-ignore:
  14. - "**/*.md"
  15. - "**/*.yaml"
  16. pull_request:
  17. branches:
  18. - "**"
  19. paths-ignore:
  20. - "**/*.md"
  21. - "**/*.yaml"
  22. jobs:
  23. semgrep:
  24. name: Scan
  25. runs-on: ubuntu-24.04
  26. container:
  27. image: semgrep/semgrep:latest
  28. continue-on-error: true
  29. if: (github.actor != 'dependabot[bot]')
  30. steps:
  31. - uses: actions/checkout@v5
  32. - run: semgrep ci