lint smtp mailer file #49

	name: semgrep

	on:
	# Scan changed files in PRs, block on new issues only (existing issues ignored)
	# pull_request:
	# branches: [ main ]

	# Scan all files on branches, block on any issues
	push:
	branches:
	- '**'

	# Schedule this job to run at a certain time, using cron syntax
	# Note that * is a special character in YAML so you have to quote this string
	# schedule:
	# - cron: '30 0 1,15 * *' # scheduled for 00:30 UTC on both the 1st and 15th of the month

	permissions:
	contents: read # for actions/checkout to fetch code
	security-events: write # for github/codeql-action/upload-sarif to upload SARIF results

	defaults:
	run:
	working-directory: src

	jobs:
	semgrep:
	name: scan
	runs-on: ubuntu-latest
	steps:
	# Fetch project source
	- uses: actions/checkout@v3

	- uses: returntocorp/semgrep-action@v1
	with:
	generateSarif: "1"
	config: >-
	p/ci
	p/python
	p/owasp-top-ten
	p/cwe-top-25

	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: semgrep.sarif
	if: always()

Provide feedback