Skip to content
.github/workflows/semgrep.yml

Add Semgrep SAST workflow, pin CI actions, document security #1

Sign in to view logs

Add Semgrep SAST workflow, pin CI actions, document security

Add Semgrep SAST workflow, pin CI actions, document security #1

Workflow file for this run

.github/workflows/semgrep.yml at 4fe2d8e
# Caller: scans THIS repo using the shared reusable Semgrep workflow in databunker-devops.
# Ruleset = Python language pack + the common security packs (see semgrep-reusable.yml).
name: semgrep
on:
workflow_dispatch: # manual "Run workflow" button in the Actions tab
pull_request:
push:
branches: [main]
schedule:
- cron: "13 7 * * 1" # weekly full sweep (Mon 07:13 UTC) — offset from gitleaks (06:27)
permissions:
contents: read
security-events: write
jobs:
sast:
name: sast # display + required-check name
uses: securitybunker/databunker-devops/.github/workflows/semgrep-reusable.yml@main

Check failure on line 20 in .github/workflows/semgrep.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/semgrep.yml

Invalid workflow file 

error parsing called workflow
".github/workflows/semgrep.yml"
-> "securitybunker/databunker-devops/.github/workflows/semgrep-reusable.yml@main"
: workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
with:
config: "p/python p/secrets p/security-audit p/owasp-top-ten"