Something went wrong. Try again.
[READ-ONLY] Mirror of https://github.com/vitest-dev/vitest. Next generation testing framework powered by Vite. vitest.dev
test testing-tools vite
Something went wrong. Try again.
YAML
1234567891011121314151617181920212223242526272829303132333435name: Semgrep
on: workflow_dispatch: schedule: - cron: '0 0 * * 2'
permissions: {}
jobs: semgrep: name: Run Semgrep runs-on: ubuntu-latest permissions: security-events: write # Required for upload-sarif to upload SARIF files. container: image: semgrep/semgrep:1.175.0@sha256:b94b53d02fd4a022f9eac4e2af1380f5c3c4c21400e79d3336bdff1d1db5e796 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false
- run: >- semgrep scan --quiet --sarif --config auto --exclude-rule javascript.lang.security.audit.detect-non-literal-regexp.detect-non-literal-regexp > semgrep-results.sarif
- name: Upload SARIF result uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: sarif_file: semgrep-results.sarif