diff --git a/static-analysis/README.md b/static-analysis/semgrep/README.md similarity index 100% rename from static-analysis/README.md rename to static-analysis/semgrep/README.md diff --git a/static-analysis/action.yaml b/static-analysis/semgrep/action.yaml similarity index 55% rename from static-analysis/action.yaml rename to static-analysis/semgrep/action.yaml index 45addba..0e5965e 100644 --- a/static-analysis/action.yaml +++ b/static-analysis/semgrep/action.yaml @@ -14,14 +14,14 @@ runs: - name: Checkout if: ${{inputs.checkout-repo == 'true'}} uses: actions/checkout@v4 - - name: Run semgrep - run: | - docker run --rm -v "${PWD}:/src" \ - -e SEMGREP_APP_TOKEN=${{ inputs.semgrep-app-token }} \ - -e SEMGREP_REPO_NAME=${GITHUB_REPOSITORY} \ - -e SEMGREP_BRANCH=${GITHUB_REF} \ - -e SEMGREP_COMMIT=${{ github.event.pull_request.head.sha }} \ - -e SEMGREP_PR_ID=${{github.event.pull_request.number}} \ - returntocorp/semgrep:latest-nonroot \ - semgrep ci + - run: echo "pausing checks" shell: bash +# docker run --rm -v "${PWD}:/src" \ +# -e SEMGREP_APP_TOKEN=${{ inputs.semgrep-app-token }} \ +# -e SEMGREP_REPO_NAME=${GITHUB_REPOSITORY} \ +# -e SEMGREP_BRANCH=${GITHUB_REF} \ +# -e SEMGREP_COMMIT=${{ github.event.pull_request.head.sha }} \ +# -e SEMGREP_PR_ID=${{github.event.pull_request.number}} \ +# returntocorp/semgrep:latest-nonroot \ +# semgrep ci +# shell: bash