diff --git a/static-analysis/semgrep/action.yaml b/static-analysis/semgrep/action.yaml index 0e5965e..46b49d3 100644 --- a/static-analysis/semgrep/action.yaml +++ b/static-analysis/semgrep/action.yaml @@ -14,14 +14,13 @@ runs: - name: Checkout if: ${{inputs.checkout-repo == 'true'}} uses: actions/checkout@v4 - - run: echo "pausing checks" + - run: | + docker run --rm -v "${PWD}:/src" \ + -e SEMGREP_APP_TOKEN=${{ inputs.semgrep-app-token }} \ + -e SEMGREP_REPO_NAME=${GITHUB_REPOSITORY} \ + -e SEMGREP_BRANCH=${GITHUB_REF} \ + -e SEMGREP_COMMIT=${{ github.event.pull_request.head.sha }} \ + -e SEMGREP_PR_ID=${{github.event.pull_request.number}} \ + returntocorp/semgrep:latest-nonroot \ + semgrep ci shell: bash -# docker run --rm -v "${PWD}:/src" \ -# -e SEMGREP_APP_TOKEN=${{ inputs.semgrep-app-token }} \ -# -e SEMGREP_REPO_NAME=${GITHUB_REPOSITORY} \ -# -e SEMGREP_BRANCH=${GITHUB_REF} \ -# -e SEMGREP_COMMIT=${{ github.event.pull_request.head.sha }} \ -# -e SEMGREP_PR_ID=${{github.event.pull_request.number}} \ -# returntocorp/semgrep:latest-nonroot \ -# semgrep ci -# shell: bash