go-ethereum/.github/workflows/semgrep.yml
Péter Garamvölgyi 12536ac34b
ci: add zizmor (#1146)
* ci: add zizmor

* trigger ci

* adjust permissions

* typo

* adjust

* adjust

* chore: auto version bump [bot]

* adjust

* adjust

* fix

* chore: auto version bump [bot]

* undo bump version

* fix branch

---------

Co-authored-by: Thegaram <7571518+Thegaram@users.noreply.github.com>
2025-03-15 13:49:30 +01:00

27 lines
566 B
YAML

on:
workflow_dispatch: {}
pull_request: {}
push:
branches:
- main
- master
paths:
- .github/workflows/semgrep.yml
schedule:
# random HH:MM to avoid a load spike on GitHub Actions at 00:00
- cron: 20 19 * * *
name: Semgrep
jobs:
semgrep:
name: semgrep/ci
runs-on: ubuntu-20.04
permissions: {}
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
container:
image: returntocorp/semgrep
steps:
- uses: actions/checkout@v3
with:
persist-credentials: false
- run: semgrep ci