feat: install semgrep

2025-12-11 12:16:02 -08:00
parent 7ca402cc2b
commit 4ac82f46ed
1 changed files with 9 additions and 12 deletions
@@ -58,20 +58,17 @@ jobs:
            cat trivy-results.txt
          fi

+      - name: Install Semgrep
+        run: python3 -m pip install semgrep
+
      # Static code analysis with Semgrep
      - name: Run Semgrep static analysis
-        uses: returntocorp/semgrep-action@v1
-        with:
-          config: >-
-            p/security-audit
-            p/owasp-top-ten
-            p/ci
-            p/security
-          generateSarif: '1'
-          outputFormat: 'text'
-          outputFile: 'semgrep-results.txt'
-          # Fail on any finding
-          error: 'true'
+        run: |
+          semgrep --config p/security-audit \
+            --config p/owasp-top-ten \
+            --config p/ci \
+            --config p/security \
+            . > semgrep-results.txt

      # Display Semgrep results
      - name: Display Semgrep scan results