Skip to content
Back to pull request #2323

Do runtime check to ensure update validator has the same parameters as the update it validates #757

Sign in to view logs

Do runtime check to ensure update validator has the same parameters as the update it validates

Do runtime check to ensure update validator has the same parameters as the update it validates #757

Workflow file for this run

temporalio/public-actions/.github/workflows/semgrep.yml at 0639b3b51e9c9d22eb433284af37aa1ba6b4fe51
# The Semgrep scan is set to run diffs only on PRs, but full scans
# weekly on Monday. A series of gitops bots have to be ignored.
name: Semgrep
on:
workflow_dispatch: {}
pull_request:
types: [opened, reopened, synchronize]
merge_group:
schedule:
- cron: '0 0 * * 1'
push:
branches:
- main
- master
jobs:
semgrep:
name: semgrep/ci
runs-on: ubuntu-latest
permissions:
packages: read
contents: read
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
container:
image: ghcr.io/temporalio/semgrep:latest
credentials:
username: ${{ github.actor }}
password: ${{ secrets.github_token }}
if: github.actor != 'dependabot[bot]' && github.actor != 'github-actions' && github.event_name != 'merge_group'
steps:
- uses: actions/checkout@v4
- name: Run semgrep ci
run: semgrep ci