diff --git a/.gitea/workflows/security.yml b/.gitea/workflows/security.yml index efaefd5..b9ee6f4 100644 --- a/.gitea/workflows/security.yml +++ b/.gitea/workflows/security.yml @@ -12,8 +12,8 @@ on: continue_on_error: true jobs: - trivy-scan: - name: Trivy Security Scan + security: + name: Security Audit runs-on: ubuntu-latest steps: @@ -66,14 +66,14 @@ jobs: run: | sudo apt-get install pipx pipx ensurepath - sudo pipx ensurepath --global + export PATH="$HOME/.local/bin:$PATH" pipx install semgrep - pipx ensurepath semgrep --version # Static code analysis with Semgrep - name: Run Semgrep static analysis run: | + export PATH="$HOME/.local/bin:$PATH" semgrep --config p/security-audit \ --config p/owasp-top-ten \ --config p/ci \