Skip to content
Security code scanner

fix: drop eslint-plugin-import from the TypeScript lint preset #75

Sign in to view logs

fix: drop eslint-plugin-import from the TypeScript lint preset

fix: drop eslint-plugin-import from the TypeScript lint preset #75

Workflow file for this run

.github/workflows/security-code-scanner.yml at 873478c
name: Security code scanner
on:
pull_request:
push:
branches: [main]
schedule:
- cron: "17 4 * * 1"
permissions:
contents: read
jobs:
# GitHub CodeQL default setup already scans JavaScript and TypeScript on PRs.
semgrep:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
with:
python-version: "3.12"
- name: Install Semgrep OSS
run: python -m pip install 'setuptools<81' semgrep==1.183.0
- name: Scan JavaScript and TypeScript
run: semgrep scan --error --config p/javascript --config p/typescript --exclude '**/node_modules/**' --exclude '**/dist/**' --exclude '**/build/**' --exclude '**/coverage/**' .