diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 10aabc6..2d4c12f 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -15,11 +15,13 @@ on: jobs: central-semgrep: name: Static code Analysis - uses: Information-Security/security-workflows/.github/workflows/central-semgrep.yml@master + uses: navi-infosec/central-semgrep-action/.github/workflows/central-semgrep.yml@master with: github-event-number: ${{github.event.number}} github-event-name: ${{github.event_name}} github-repository: ${{github.repository}} + secrets: + READ_SEMGREP_RULES: ${{secrets.READ_SEMGREP_RULES}} run-if-failed: runs-on: [ self-hosted ] @@ -28,7 +30,7 @@ jobs: steps: - name: Create comment if: ${{ ( github.event.number != '' ) }} - uses: peter-evans/create-or-update-comment@v2 + uses: navi-synced-actions/create-or-update-comment@v2 with: issue-number: ${{ github.event.pull_request.number }} body: | @@ -36,4 +38,4 @@ jobs: - name: Assign Reviewers if: ${{ ( github.event.number != '' ) }} - uses: Information-Security/security-oncall-action@v1.1 + uses: navi-infosec/security-oncall-action@v1.1