diff --git a/.github/workflows/secure.yml b/.github/workflows/secure.yml index 39a6e5c2..8ee6d379 100644 --- a/.github/workflows/secure.yml +++ b/.github/workflows/secure.yml @@ -21,15 +21,13 @@ jobs: security-events: write steps: - uses: actions/checkout@v4 - - run: semgrep scan - - run: semgrep ci --sarif --output=semgrep.sarif || true + - run: semgrep scan --sarif --output=semgrep.sarif --error --severity=WARNING env: SEMGREP_RULES: >- p/command-injection p/comment p/cwe-top-25 p/default - p/gitlab p/gitleaks p/golang p/gosec @@ -78,4 +76,4 @@ jobs: steps: - uses: golang/govulncheck-action@v1 with: - go-version-file: go.mod + go-version-file: go.mod \ No newline at end of file