Commit 970d0ae 1 parent 5ff477f commit 970d0ae Copy full SHA for 970d0ae
File tree 1 file changed +10
-3
lines changed
1 file changed +10
-3
lines changed Original file line number Diff line number Diff line change @@ -23,12 +23,19 @@ jobs:
23
23
if : (github.actor != 'dependabot[bot]')
24
24
25
25
steps :
26
- - name : Checkout Code
26
+ - name : Checkout Workflow Config
27
27
uses : actions/checkout@v4
28
-
28
+ with :
29
+ repository : ${github.action_repository}
30
+ path : action_scanning
31
+
32
+ - name : Checkout Code
33
+ uses : actions/checkout@v4
34
+ with :
35
+ path : code_to_scan
29
36
30
37
- name : Run Actions semgrep scan
31
- run : semgrep scan --sarif --config semgrep-rules/actions >> semgrep-results-actions.sarif
38
+ run : semgrep scan --sarif --config action_scanning/ semgrep-rules/actions code_to_scan >> semgrep-results-actions.sarif
32
39
33
40
- name : Save Actions SARIF results as artifact
34
41
uses : actions/upload-artifact@v4
You can’t perform that action at this time.
0 commit comments