Skip to content

Commit 970d0ae

Browse files
committed
Change workflow to checkout config as well.
1 parent 5ff477f commit 970d0ae

File tree

1 file changed

+10
-3
lines changed

1 file changed

+10
-3
lines changed

.github/workflows/action_scanning.yml

+10-3
Original file line numberDiff line numberDiff line change
@@ -23,12 +23,19 @@ jobs:
2323
if: (github.actor != 'dependabot[bot]')
2424

2525
steps:
26-
- name: Checkout Code
26+
- name: Checkout Workflow Config
2727
uses: actions/checkout@v4
28-
28+
with:
29+
repository: ${github.action_repository}
30+
path: action_scanning
31+
32+
- name: Checkout Code
33+
uses: actions/checkout@v4
34+
with:
35+
path: code_to_scan
2936

3037
- name: Run Actions semgrep scan
31-
run: semgrep scan --sarif --config semgrep-rules/actions >> semgrep-results-actions.sarif
38+
run: semgrep scan --sarif --config action_scanning/semgrep-rules/actions code_to_scan >> semgrep-results-actions.sarif
3239

3340
- name: Save Actions SARIF results as artifact
3441
uses: actions/upload-artifact@v4

0 commit comments

Comments
 (0)