Skip to content

Commit

Permalink
Update semgrep.yml (#245)
Browse files Browse the repository at this point in the history
Updating Semgrep.yml file - Semgrep is a tool that will be used to scan
Cloudflare's public repos for Supply chain, code and secrets. This work
is part of Application & Product Security team's initiative to onboard
Semgrep onto all of Cloudflare's public repos.

In case of any questions, please reach out to "Hrushikesh Deshpande" on
cf internal chat.
  • Loading branch information
hrushikeshdeshpande authored Mar 3, 2025
1 parent 9935c55 commit 20b9981
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions .github/workflows/semgrep.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@

on:
pull_request: {}
workflow_dispatch: {}
Expand All @@ -12,14 +11,14 @@ name: Semgrep config
jobs:
semgrep:
name: semgrep/ci
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
SEMGREP_URL: https://cloudflare.semgrep.dev
SEMGREP_APP_URL: https://cloudflare.semgrep.dev
SEMGREP_VERSION_CHECK_URL: https://cloudflare.semgrep.dev/api/check-version
container:
image: returntocorp/semgrep
image: semgrep/semgrep
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v4
- run: semgrep ci

0 comments on commit 20b9981

Please sign in to comment.