From 396c309c11b29e314d87f4d714c3bf109b313ecd Mon Sep 17 00:00:00 2001 From: Evan Sims Date: Mon, 12 Jun 2023 15:10:43 -0500 Subject: [PATCH] Update sec_semgrep.yml --- .github/workflows/sec_semgrep.yml | 14 ++++---------- 1 file changed, 4 insertions(+), 10 deletions(-) diff --git a/.github/workflows/sec_semgrep.yml b/.github/workflows/sec_semgrep.yml index e9be6baf..ca1ee291 100644 --- a/.github/workflows/sec_semgrep.yml +++ b/.github/workflows/sec_semgrep.yml @@ -5,6 +5,9 @@ on: branches: - main + schedule: + - cron: '30 0 1,15 * *' + jobs: semgrep: runs-on: ubuntu-latest @@ -14,16 +17,7 @@ jobs: steps: - uses: actions/checkout@v3 - with: - persist-credentials: false - - run: semgrep scan --sarif --output=semgrep.sarif + - run: semgrep ci env: - SEMGREP_RULES: >- - p/phpcs-security-audit - p/security-audit - p/secrets - p/owasp-top-ten SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} - SEMGREP_REPO_NAME: "auth0/auth0-PHP" - SEMGREP_REPO_URL: "https://github.com/auth0/auth0-PHP"