feat: install semgrep

.gitea/workflows/security.yml

@@ -58,20 +58,17 @@ jobs:
             cat trivy-results.txt
           fi
 
+      - name: Install Semgrep
+        run: python3 -m pip install semgrep
+
       # Static code analysis with Semgrep
       - name: Run Semgrep static analysis
-        uses: returntocorp/semgrep-action@v1
+        run: |
-        with:
+          semgrep --config p/security-audit \
-          config: >-
+            --config p/owasp-top-ten \
-            p/security-audit
+            --config p/ci \
-            p/owasp-top-ten
+            --config p/security \
-            p/ci
+            . > semgrep-results.txt
-            p/security
-          generateSarif: '1'
-          outputFormat: 'text'
-          outputFile: 'semgrep-results.txt'
-          # Fail on any finding
-          error: 'true'
 
       # Display Semgrep results
       - name: Display Semgrep scan results