From b83b0666e35d5be5778e9ecfc2553c19420c1f87 Mon Sep 17 00:00:00 2001 From: Paul Chen Date: Thu, 24 Aug 2023 13:29:28 -0700 Subject: [PATCH] SECENG-1297 [skip ci] Create non-blocking workflow for static code analysis upon PR --- .github/workflows/semgrep.yml | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .github/workflows/semgrep.yml diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml new file mode 100644 index 0000000..aca0ab8 --- /dev/null +++ b/.github/workflows/semgrep.yml @@ -0,0 +1,9 @@ +name: Security analysis with Semgrep +on: + workflow_dispatch: {} + pull_request: {} +jobs: + call-workflow-passing-data: + uses: tripactions/ta-seceng-automation/.github/workflows/reusable.yml@main + secrets: + SEMGREP_REUSABLE_TOKEN: ${{ secrets.SEMGREP_ORG_APP_TOKEN }}