fix sempgrep job (#24)

skildops · Apr 3, 2024 · f24b78f · f24b78f
1 parent 677c35e
commit f24b78f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -56,6 +56,11 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: semgrep ci --config "p/ci" --config "p/python" --config "p/owasp-top-ten" --sarif --output=semgrep.sarif
+        env:
+          # Connect to Semgrep Cloud Platform through your SEMGREP_APP_TOKEN.
+          # Generate a token from Semgrep Cloud Platform > Settings
+          # and add it to your GitHub secrets.
+          SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
   release:
     needs: [test, checkov, codeql, semgrep]
     runs-on: ubuntu-latest

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -27,6 +27,9 @@ jobs:
   semgrep:
     name: scan
     runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: src
     container:
       image: semgrep/semgrep
     steps: