Skip to content

GitHub Action to run Semgrep with custom rules. Results are uploaded to GitHub's Code Scanning API

Notifications You must be signed in to change notification settings

MetaMask/semgrep-action

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

27 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

semgrep-action

This repository is home to the GitHub action workflow that will run perform a semgrep scan on a checked out repository. After the scan is complete, the results will be uploaded to GitHub's Code Scanning API.

Usage

- name: Semgrep Scan
    uses: MetaMask/Semgrep-action@main
    with:
        # optional string parameter
        paths_ignored: ...

For information on how to contribute rules to this repository, please see https://github.com/MetaMask/semgrep-action/blob/main/CONTRIBUTING.md.

About

GitHub Action to run Semgrep with custom rules. Results are uploaded to GitHub's Code Scanning API

Resources

Code of conduct

Security policy

Stars

Watchers

Forks

Sponsor this project

Languages