Skip to content

Commit

Permalink
semgrep config and issues
Browse files Browse the repository at this point in the history
  • Loading branch information
Ryan Laddusaw committed Sep 23, 2024
1 parent a957493 commit 31e1158
Show file tree
Hide file tree
Showing 2 changed files with 27 additions and 0 deletions.
9 changes: 9 additions & 0 deletions .circleci/config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -72,6 +72,14 @@ jobs:
- checkout
- run: curl -sfL https://raw.githubusercontent.com/Bearer/bearer/main/contrib/install.sh | sh -s -- -b /tmp
- run: CURRENT_BRANCH=$CIRCLE_BRANCH SHA=$CIRCLE_SHA1 /tmp/bearer scan .
semgrep:
docker:
- image: returntocorp/semgrep
steps:
- checkout
- run:
name: Check code against community-provided and custom semgrep rules
command: semgrep ci --config auto
workflows:
version: 2
build_and_test:
Expand All @@ -90,3 +98,4 @@ workflows:
requires:
- build
- bearer
- semgrep
18 changes: 18 additions & 0 deletions .semgrepignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Common large paths
node_modules/
vendor/
*.min.js
spec/
.github/

# Semgrep rules folder
.semgrep

# Semgrep-action log folder
.semgrep_logs/

# Tickets to remediate these rules and remove from this list
config/
# https://github.com/pulibrary/repecwp/issues/143
app/controllers/
# https://github.com/pulibrary/repecwp/issues/144

0 comments on commit 31e1158

Please sign in to comment.