Semgrep Integration #571
Semgrep Integration #571
Conversation
.github/workflows/security.yml
Outdated
| steps: | ||
| - name: Set github commit id | ||
| run: | | ||
| if [ "${{ github.event_name }}" = "push" ]; then |
There was a problem hiding this comment.
| if [ "${{ github.event_name }}" = "push" ]; then | |
| if [ "${{ github.event_name }}" = "push" ] || "${{ github.event_name }}" = "schedule" ]; then |
![semgrep-app[bot]](https://avatars.githubusercontent.com/in/60555?s=60&v=4){kind=small}
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
|
|
||
| workflow_status: | ||
| runs-on: [ ubuntu-latest ] |
There was a problem hiding this comment.
Github action should use self hosted runner insted of the github provided runners
Click a link below to tell your Security Team if this comment was:
👍 useful
👎 not useful (false positive)
🤔 confusing
This comment is advisory. You do not need to address it before merging this pull request.
(non-self-hosted-runner in OrgWideCustomRules)
| jobs: | ||
| semgrep: | ||
| name: Scan | ||
| runs-on: [ubuntu-latest] |
There was a problem hiding this comment.
Github action should use self hosted runner insted of the github provided runners
Click a link below to tell your Security Team if this comment was:
👍 useful
👎 not useful (false positive)
🤔 confusing
This comment is advisory. You do not need to address it before merging this pull request.
(non-self-hosted-runner in OrgWideCustomRules)
No description provided.