From a65e3e84dd53e767b2ff05bf8b31623d317d17a5 Mon Sep 17 00:00:00 2001 From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com> Date: Tue, 21 Sep 2021 09:41:31 -0700 Subject: [PATCH] Re-enable semgrep output Re-enable semgrep output. Issue was fixed by adding files to .semgrepignore --- .github/workflows/semgrep-analysis.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/semgrep-analysis.yml b/.github/workflows/semgrep-analysis.yml index 5f2993737c..15094de479 100644 --- a/.github/workflows/semgrep-analysis.yml +++ b/.github/workflows/semgrep-analysis.yml @@ -44,15 +44,15 @@ jobs: # Scan code using project's configuration on https://semgrep.dev/manage - uses: returntocorp/semgrep-action@v1 with: - generateSarif: "0" + generateSarif: "1" config: >- # more at semgrep.dev/explore p/security-audit p/secrets # Upload SARIF file generated in previous step #The following lines are commented out right now pending a fix to the semgrep repo - #- name: Upload SARIF file - # uses: github/codeql-action/upload-sarif@v1 - # with: - # sarif_file: semgrep.sarif - # if: always() + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: semgrep.sarif + if: always()