Merge pull request #20 from medici/repo-sync/security-workflows/default

🔄 Synced file(s) with Information-Security/security-workflows

.github/workflows/semgrep.yml

@@ -23,10 +23,16 @@ jobs:
       - name: Clean workspace
         uses: navi-infra/clean-workspace@master
         
-      # Fetch project source
+      # Fetch Project Source
       - uses: actions/checkout@v3
+        name: Checkout Source Repository
+        
+      # Fetch Semgrep Rules
       - name: Fetching Semgrep Rules
-        run: /usr/bin/git clone https://${{ secrets.SEMGREP_PAT }}@github.cmd.navi-tech.in/Information-Security/semgrep-rules.git
+        uses: actions/checkout@v3
+        with:
+          repository: Information-Security/semgrep-rules
+          path: semgrep-rules
       
       - name: Semgrep Scan
         run: |