generated from nhcarrigan/template
This commit is contained in:
@@ -12,8 +12,8 @@ on:
|
||||
continue_on_error: true
|
||||
|
||||
jobs:
|
||||
trivy-scan:
|
||||
name: Trivy Security Scan
|
||||
security:
|
||||
name: Security Audit
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
@@ -66,14 +66,14 @@ jobs:
|
||||
run: |
|
||||
sudo apt-get install pipx
|
||||
pipx ensurepath
|
||||
sudo pipx ensurepath --global
|
||||
export PATH="$HOME/.local/bin:$PATH"
|
||||
pipx install semgrep
|
||||
pipx ensurepath
|
||||
semgrep --version
|
||||
|
||||
# Static code analysis with Semgrep
|
||||
- name: Run Semgrep static analysis
|
||||
run: |
|
||||
export PATH="$HOME/.local/bin:$PATH"
|
||||
semgrep --config p/security-audit \
|
||||
--config p/owasp-top-ten \
|
||||
--config p/ci \
|
||||
|
||||
Reference in New Issue
Block a user