Merge pull request #1 from verygood-ops/semgrep-semgrep

INFRA-10603 semgrep-sast
verygood-ops · Dec 20, 2024 · 2b342ab · 2b342ab
2 parents e6b5d79 + 5027cde
commit 2b342ab
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/.github/workflows/security-scan-sast.yaml b/.github/workflows/security-scan-sast.yaml
@@ -0,0 +1,15 @@
+name: security-scan-sast
+
+on:
+  pull_request:
+  workflow_dispatch:
+  schedule:
+    - cron: "30 1 * * *" # Sets Semgrep to scan every day at 1:30 UTC
+
+jobs:
+  scan:
+    uses: verygood-ops/cicd-shared/.github/workflows/security-scan-sast.yaml@security-scan-sast-v1
+    with:
+      uses_maven: false
+    secrets:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}