From f1b96001132029ab2380b9ae5ebd4823ddbf6d79 Mon Sep 17 00:00:00 2001 From: Marcelo Sacchetin Date: Thu, 19 Sep 2024 09:30:03 -0500 Subject: [PATCH 1/2] [SEC-7632] Moved Semgrep scan from CI to Managed Semgrep --- .github/workflows/semgrep.yml | 50 ++++++++++++++++++----------------- 1 file changed, 26 insertions(+), 24 deletions(-) diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 66f595c..cfd761c 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -1,24 +1,26 @@ -on: - workflow_dispatch: {} - pull_request: {} - push: - branches: - - main - - master - paths: - - .github/workflows/semgrep.yml - schedule: - # random HH:MM to avoid a load spike on GitHub Actions at 00:00 - - cron: 13 8 * * * -name: Semgrep -jobs: - semgrep: - name: semgrep/ci - runs-on: ubuntu-20.04 - env: - SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} - container: - image: returntocorp/semgrep - steps: - - uses: actions/checkout@v3 - - run: semgrep ci +# Scan migrated to Semgrep Managed Scans +# https://semgrep.dev/orgs/-/projects/webflow%2Fdevlink-examples +#on: +# workflow_dispatch: {} +# pull_request: {} +# push: +# branches: +# - main +# - master +# paths: +# - .github/workflows/semgrep.yml +# schedule: +# # random HH:MM to avoid a load spike on GitHub Actions at 00:00 +# - cron: 13 8 * * * +#name: Semgrep +#jobs: +# semgrep: +# name: semgrep/ci +# runs-on: ubuntu-20.04 +# env: +# SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} +# container: +# image: returntocorp/semgrep +# steps: +# - uses: actions/checkout@v3 +# - run: semgrep ci From 534bd11c5af45a5e4571d2c09141767fc54c2137 Mon Sep 17 00:00:00 2001 From: Marcelo Sacchetin Date: Fri, 20 Sep 2024 15:14:11 -0500 Subject: [PATCH 2/2] [SEC-7632] Moved Semgrep scan from CI to Managed Semgrep. --- .github/workflows/semgrep.yml | 26 -------------------------- 1 file changed, 26 deletions(-) delete mode 100644 .github/workflows/semgrep.yml diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml deleted file mode 100644 index cfd761c..0000000 --- a/.github/workflows/semgrep.yml +++ /dev/null @@ -1,26 +0,0 @@ -# Scan migrated to Semgrep Managed Scans -# https://semgrep.dev/orgs/-/projects/webflow%2Fdevlink-examples -#on: -# workflow_dispatch: {} -# pull_request: {} -# push: -# branches: -# - main -# - master -# paths: -# - .github/workflows/semgrep.yml -# schedule: -# # random HH:MM to avoid a load spike on GitHub Actions at 00:00 -# - cron: 13 8 * * * -#name: Semgrep -#jobs: -# semgrep: -# name: semgrep/ci -# runs-on: ubuntu-20.04 -# env: -# SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} -# container: -# image: returntocorp/semgrep -# steps: -# - uses: actions/checkout@v3 -# - run: semgrep ci