feat: SECOPS-2525 - add semgrep job (#196)

* feat: add semgrep job

* Update config.yml

---------

Co-authored-by: Matt Peake <[email protected]>

Author: svc-secops

.circleci/config.yml

@@ -2,7 +2,7 @@ version: 2.1
 
 orbs:
   node: circleci/[email protected]
-  secops: apollo/[email protected].1
+  secops: apollo/[email protected].7
 
 commands:
   install-volta:
@@ -26,7 +26,7 @@ commands:
       - when:
           condition: << parameters.node-version >>
           steps:
-          - run: volta pin node@<< parameters.node-version >>
+            - run: volta pin node@<< parameters.node-version >>
       - run: node --version
       - run: npm --version
       - node/install-packages
@@ -37,7 +37,7 @@ jobs:
       node-version:
         type: string
     docker:
-    - image: cimg/base:stable
+      - image: cimg/base:stable
     steps:
       - setup-node:
           node-version: <<parameters.node-version>>
@@ -47,7 +47,7 @@ jobs:
 
   Prettier:
     docker:
-    - image: cimg/base:stable
+      - image: cimg/base:stable
     steps:
       - setup-node
       - run: npm run prettier:check
@@ -73,4 +73,9 @@ workflows:
             - github-orb
             - secops-oidc
           git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>
-          git-revision: << pipeline.git.revision >>
+          git-revision: << pipeline.git.revision >>
+      - secops/semgrep:
+          context:
+            - secops-oidc
+            - github-orb
+          git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>