diff --git a/.github/workflows/devsecops.yml b/.github/workflows/devsecops.yml index e2f546e6713..9ddfdfa117b 100644 --- a/.github/workflows/devsecops.yml +++ b/.github/workflows/devsecops.yml @@ -21,14 +21,10 @@ jobs: semgrep: runs-on: ubuntu-latest - env: - SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} - container: - image: returntocorp/semgrep - if: (github.actor != 'dependabot[bot]') steps: - uses: actions/checkout@v3 - - run: semgrep ci + - name: semgrep + run: docker run --rm -v "${PWD}:/src" returntocorp/semgrep semgrep scan * >> $GITHUB_STEP_SUMMARY build: