chore: auto-update github workflows

2026-04-07 10:27:40 +00:00
parent 1cf52d8b39
commit 42d1ca8fd4
1 changed files with 26 additions and 0 deletions
@@ -0,0 +1,26 @@
+# --------------------------------------------------------------------------------------------
+# This file is generated. Do not edit manually
+# --------------------------------------------------------------------------------------------
+name: SAST
+'on':
+  push:
+    branches:
+      - master
+jobs:
+  sast:
+    runs-on: ubuntu-latest
+    container:
+      image: semgrep/semgrep
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 1
+      - name: Clone Apiiro malicious code ruleset
+        run: git clone https://github.com/apiiro/malicious-code-ruleset.git /apiiro-ruleset
+      - name: Run Semgrep SAST scan
+        run: semgrep ci --code --config=auto --config /apiiro-ruleset --json > sast-report.json || true
+      - name: Upload SAST report
+        uses: actions/upload-artifact@v4
+        with:
+          name: sast-report
+          path: sast-report.json