Semgrep #584

	# See https://semgrep.dev/docs
	---
	name: Semgrep
	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: '30 19 * * 1'

	jobs:
	semgrep:
	name: Scan
	runs-on: ubuntu-latest
	steps:
	# Checkout project source
	- uses: actions/checkout@v3

	# Scan code using project's configuration on https://semgrep.dev/manage
	- uses: returntocorp/semgrep-action@v1
	with:
	publishToken: ${{ secrets.SEMGREP_APP_TOKEN }}
	generateSarif: "1"
	config: "p/ruby"

	# Upload SARIF file generated in previous step
	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@v1
	with:
	sarif_file: semgrep.sarif
	if: always()

Provide feedback