ci: pin semgrep to old version (#38426)

* ci: pin semgrep to old version current version has problem with PRs originating from fork * ci: unpin semgrep --------- Co-authored-by: Ankush Menat <[email protected]> Co-authored-by: Ankush Menat <[email protected]>
frappe · Nov 29, 2023 · 2c4cee0 · 2c4cee0
1 parent 303becf
commit 2c4cee0
Showing 1 changed file with 7 additions and 9 deletions.
diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
@@ -11,21 +11,19 @@ jobs:
     steps:
       - uses: actions/checkout@v2
 
-      - name: Set up Python 3.8
+      - name: Set up Python 3.10
         uses: actions/setup-python@v2
         with:
-          python-version: 3.8
+          python-version: '3.10'
 
       - name: Install and Run Pre-commit
         uses: pre-commit/[email protected]
 
       - name: Download Semgrep rules
         run: git clone --depth 1 https://github.com/frappe/semgrep-rules.git frappe-semgrep-rules
 
-      - uses: returntocorp/semgrep-action@v1
-        env:
-            SEMGREP_TIMEOUT: 120
-        with:
-            config: >-
-              r/python.lang.correctness
-              ./frappe-semgrep-rules/rules
+      - name: Download semgrep
+        run: pip install semgrep
+
+      - name: Run Semgrep rules
+        run: semgrep ci --config ./frappe-semgrep-rules/rules --config r/python.lang.correctness