Update devsecops.yml

akto-api-security · Oct 19, 2023 · 7fe34bc · 7fe34bc
1 parent 53094be
commit 7fe34bc
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/devsecops.yml b/.github/workflows/devsecops.yml
@@ -18,6 +18,19 @@ jobs:
     - uses: actions/checkout@v2
     - name: trufflehog
       run: docker run --rm -t -v "$PWD:/pwd" trufflesecurity/trufflehog:latest  filesystem /pwd/lib/ >> $GITHUB_STEP_SUMMARY
+
+  semgrep:
+    name: semgrep/ci
+    runs-on: ubuntu-20.04
+    env:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+    container:
+      image: returntocorp/semgrep
+    if: (github.actor != 'dependabot[bot]')
+    steps:
+      - uses: actions/checkout@v3
+      - run: semgrep ci
+
 
   build:
     runs-on: ubuntu-latest