From ebf3a8df0c316b2b2867b7ea7045ae069c8c3376 Mon Sep 17 00:00:00 2001 From: Jorge Turrado Date: Thu, 25 Jul 2024 13:46:09 +0200 Subject: [PATCH] fix: Exclude test files from semgrep scan Signed-off-by: Jorge Turrado --- .github/workflows/static-analysis-semgrep.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/static-analysis-semgrep.yml b/.github/workflows/static-analysis-semgrep.yml index 91eea586c09..f7695c00d3b 100644 --- a/.github/workflows/static-analysis-semgrep.yml +++ b/.github/workflows/static-analysis-semgrep.yml @@ -2,7 +2,7 @@ name: "Semgrep" on: push: - branches: [ "main" ] + branches: ["main"] pull_request_target: {} concurrency: @@ -12,7 +12,7 @@ concurrency: jobs: semgrep: name: Analyze Semgrep - runs-on: ubuntu-latest + runs-on: ARM64 container: returntocorp/semgrep if: (github.actor != 'dependabot[bot]') steps: @@ -30,7 +30,7 @@ jobs: apk add github-cli gh pr checkout ${{ github.event.number }} - - run: semgrep ci --sarif --output=semgrep.sarif + - run: semgrep ci --exclude=test --exclude=test --sarif --output=semgrep.sarif env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}