use semgrep to test rules

trailofbits · Jan 2, 2024 · 9be0a0a · 9be0a0a
1 parent 4a5d2f1
commit 9be0a0a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/semgrep-rules-test.yml b/.github/workflows/semgrep-rules-test.yml
@@ -28,3 +28,5 @@ jobs:
           wget https://raw.githubusercontent.com/returntocorp/semgrep-rules/c5ad4bb0f4c7ee5b8cd47276b582e8bb57bd0a4d/.github/scripts/validate-metadata.py
           wget https://raw.githubusercontent.com/returntocorp/semgrep-rules/develop/metadata-schema.yaml.schm
           python ./validate-metadata.py -s ./metadata-schema.yaml.schm -f .
+      - name: x
+        run: semgrep --config="r/yaml.semgrep" --severity ERROR .