add base semgrep

jeremylong · Feb 12, 2021 · 0761cdf · 0761cdf
1 parent 19907b1
commit 0761cdf
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/workflows/pull_requests.yml b/.github/workflows/pull_requests.yml
@@ -33,3 +33,15 @@ jobs:
           name: it-test-logs
           retention-days: 7
           path: maven/target/it/**/build.log
+  semgrep:
+    runs-on: ubuntu-latest
+    name: Check
+    steps:
+      - uses: actions/checkout@v1
+      - name: Semgrep
+        id: semgrep
+        uses: returntocorp/semgrep-action@v1
+        with:
+          config: p/r2c
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}