@@ -4,23 +4,23 @@ name: Check-Semgrep
44on :
55 workflow_dispatch :
66 push :
7- branches : [ "main" ]
7+ branches : ["main"]
88 paths-ignore :
99 - " docs/**"
1010 - " **/*.md"
1111 - " **/*.yaml"
1212 - " CHANGELOG/**"
1313 pull_request :
14- branches : [ "*" ]
14+ branches : ["*"]
1515 paths-ignore :
1616 - " docs/**"
1717 - " **/*.md"
1818 - " **/*.yaml"
1919 - " CHANGELOG/**"
2020
2121concurrency :
22- group : ${{ github.workflow }}-${{ github.ref }}
23- cancel-in-progress : ${{ github.event_name == 'pull_request' }}
22+ group : ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
23+ cancel-in-progress : true
2424
2525jobs :
2626 semgrep :
@@ -43,18 +43,18 @@ jobs:
4343 # Fetch project source with GitHub Actions Checkout.
4444 - uses : actions/checkout@v4
4545 # Run the "semgrep ci" command on the command line of the docker image.
46- -
47- run : |
46+ - run : |
4847 semgrep ci \
4948 --exclude-rule go.lang.security.audit.xss.import-text-template.import-text-template \
5049 --exclude-rule yaml.kubernetes.security.run-as-non-root.run-as-non-root \
5150 --exclude-rule yaml.github-actions.security.pull-request-target-code-checkout.pull-request-target-code-checkout \
5251 --exclude-rule yaml.github-actions.security.third-party-action-not-pinned-to-commit-sha.third-party-action-not-pinned-to-commit-sha
5352 env:
54- # Add the rules that Semgrep uses by setting the SEMGREP_RULES environment variable.
55- SEMGREP_RULES : p/default # more at semgrep.dev/explore
53+ # Add the rules that Semgrep uses by setting the SEMGREP_RULES environment variable.
54+ SEMGREP_RULES: p/default # more at semgrep.dev/explore
5655
57- # Uncomment SEMGREP_TIMEOUT to set this job's timeout (in seconds):
58- # Default timeout is 1800 seconds (30 minutes).
59- # Set to 0 to disable the timeout.
60- # SEMGREP_TIMEOUT: 300
56+
57+ # Uncomment SEMGREP_TIMEOUT to set this job's timeout (in seconds):
58+ # Default timeout is 1800 seconds (30 minutes).
59+ # Set to 0 to disable the timeout.
60+ # SEMGREP_TIMEOUT: 300
0 commit comments