Update semgrep.yml

Updating Semgrep.yml file - Semgrep is a tool that will be used to scan Cloudflare's public repos for Supply chain, code and secrets. This work is part of Application & Product Security team's initiative to onboard Semgrep onto all of Cloudflare's public repos.

In case of any questions, please reach out to "Hrushikesh Deshpande" on cf internal chat.
This commit is contained in:
hrushikeshdeshpande
2024-09-21 17:10:24 -04:00
committed by GitHub
parent ecd6febe99
commit b2eeab0daa

View File

@@ -1,4 +1,3 @@
on:
pull_request: {}
workflow_dispatch: {}
@@ -6,11 +5,13 @@ on:
branches:
- main
- master
schedule:
- cron: '0 0 * * *'
name: Semgrep config
jobs:
semgrep:
name: semgrep/ci
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
SEMGREP_URL: https://cloudflare.semgrep.dev
@@ -19,5 +20,5 @@ jobs:
container:
image: returntocorp/semgrep
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v4
- run: semgrep ci