ci: add semgrep job

Signed-off-by: Dwi Siswanto <[email protected]>
kitabisa · Apr 18, 2024 · b44c87e · b44c87e
1 parent cbfa6a2
commit b44c87e
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -26,3 +26,15 @@ jobs:
         run: bun danger ci
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+
+  semgrep:
+    needs: ci
+    runs-on: ubuntu-latest
+    container:
+      image: semgrep/semgrep
+    if: (github.actor != 'dependabot[bot]')
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - run: semgrep ci