generated from nhcarrigan/template
This commit is contained in:
@@ -12,8 +12,8 @@ on:
|
|||||||
continue_on_error: true
|
continue_on_error: true
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
trivy-scan:
|
security:
|
||||||
name: Trivy Security Scan
|
name: Security Audit
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
@@ -66,14 +66,14 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
sudo apt-get install pipx
|
sudo apt-get install pipx
|
||||||
pipx ensurepath
|
pipx ensurepath
|
||||||
sudo pipx ensurepath --global
|
export PATH="$HOME/.local/bin:$PATH"
|
||||||
pipx install semgrep
|
pipx install semgrep
|
||||||
pipx ensurepath
|
|
||||||
semgrep --version
|
semgrep --version
|
||||||
|
|
||||||
# Static code analysis with Semgrep
|
# Static code analysis with Semgrep
|
||||||
- name: Run Semgrep static analysis
|
- name: Run Semgrep static analysis
|
||||||
run: |
|
run: |
|
||||||
|
export PATH="$HOME/.local/bin:$PATH"
|
||||||
semgrep --config p/security-audit \
|
semgrep --config p/security-audit \
|
||||||
--config p/owasp-top-ten \
|
--config p/owasp-top-ten \
|
||||||
--config p/ci \
|
--config p/ci \
|
||||||
|
|||||||
Reference in New Issue
Block a user