diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 77954d2..54c0b69 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -5,6 +5,9 @@ on: workflow_dispatch: {} push: branches: ["master", "main"] + schedule: + - cron: '30 15 */15 * *' # Sets Semgrep to scan every 15 days. + jobs: semgrep: name: semgrep/ci @@ -15,7 +18,7 @@ jobs: if: (github.actor != 'dependabot[bot]') steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - run: semgrep ci --sarif > semgrep.sarif env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} @@ -24,4 +27,8 @@ jobs: uses: github/codeql-action/upload-sarif@v2 with: sarif_file: semgrep.sarif - if: always() \ No newline at end of file + if: always() + + + +