From d9ffc849745f6ae7f5d3d1cdadfc6ecb8de89206 Mon Sep 17 00:00:00 2001 From: "GitHubArchive\\Security Bot" <139380552+QmXlHmfO39zByWGimPkMqdaJZmb8BzN3PDDTmiM@users.noreply.github.com> Date: Thu, 13 Jul 2023 02:20:07 +0530 Subject: [PATCH] SP-604 | Synced file(s) with navi-infosec/security-workflows (#5) Co-authored-by: security-bot_navi --- .github/workflows/semgrep.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 10aabc6..2d4c12f 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -15,11 +15,13 @@ on: jobs: central-semgrep: name: Static code Analysis - uses: Information-Security/security-workflows/.github/workflows/central-semgrep.yml@master + uses: navi-infosec/central-semgrep-action/.github/workflows/central-semgrep.yml@master with: github-event-number: ${{github.event.number}} github-event-name: ${{github.event_name}} github-repository: ${{github.repository}} + secrets: + READ_SEMGREP_RULES: ${{secrets.READ_SEMGREP_RULES}} run-if-failed: runs-on: [ self-hosted ] @@ -28,7 +30,7 @@ jobs: steps: - name: Create comment if: ${{ ( github.event.number != '' ) }} - uses: peter-evans/create-or-update-comment@v2 + uses: navi-synced-actions/create-or-update-comment@v2 with: issue-number: ${{ github.event.pull_request.number }} body: | @@ -36,4 +38,4 @@ jobs: - name: Assign Reviewers if: ${{ ( github.event.number != '' ) }} - uses: Information-Security/security-oncall-action@v1.1 + uses: navi-infosec/security-oncall-action@v1.1