semgrep-rules-test.yml

name: semgrep-rules-test

on:
  pull_request:
  push:
    branches:
    - main

jobs:
  test:
    name: rules-test-${{ matrix.semgrep_version }}
    runs-on: ubuntu-20.04
    strategy:
      fail-fast: false
      matrix:
        include:
          - semgrep_version: '1.56.0'
            install_command: 'python3 -m pip install semgrep==1.56.0'
          - semgrep_version: '1.58.0'
            install_command: 'python3 -m pip install semgrep==1.58.0'
          - semgrep_version: 'latest'
            install_command: 'python3 -m pip install semgrep'
    steps:
    - uses: actions/checkout@v4
      with:
        submodules: true
    - uses: actions/setup-python@v5
      with:
        python-version: '3.10'
    - name: Install Semgrep
      run: ${{ matrix.install_command }}
    - name: Validate rules
      run: semgrep --validate --config rules
    - name: Run semgrep
      run: semgrep --test --test-ignore-todo
    continue-on-error: ${{ matrix.semgrep_version == 'latest' }}