mirror of
https://github.com/finos/SymphonyElectron.git
synced 2024-12-31 19:27:00 -06:00
15 lines
328 B
YAML
15 lines
328 B
YAML
|
name: Static code analysis
|
||
|
|
|
||
|
|
on: [push, pull_request]
|
||
|
|
|
||
|
|
jobs:
|
||
|
|
semgrep:
|
||
|
|
name: run-semgrep
|
||
|
|
runs-on: ubuntu-latest
|
||
|
|
container:
|
||
|
|
image: returntocorp/semgrep
|
||
|
|
steps:
|
||
|
|
- uses: actions/checkout@v3
|
||
|
|
- run: semgrep scan --error --config auto
|
||
|
|
env:
|
||
|
|
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
|