External/portabase
1
0
Fork 0
mirror of https://github.com/Portabase/portabase.git synced 2026-07-14 11:16:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Working on the retention system.

Browse Source
This commit is contained in:
charlesgauthereau
2025-08-28 09:53:32 +02:00
parent 19ea5543ea
commit 98f1b329ae
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/security.yml
+8 -3
View File
@@ -16,20 +16,25 @@ jobs:
severity: 'CRITICAL,HIGH' severity: 'CRITICAL,HIGH'
ignore-unfixed: true ignore-unfixed: true
sast-semgrep: # Static code analysis sast-semgrep:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
# Checkout code
- uses: actions/checkout@v4 - uses: actions/checkout@v4
# Run Semgrep
- uses: returntocorp/semgrep-action@v1 - uses: returntocorp/semgrep-action@v1
with: with:
config: >- config: >-
p/owasp-top-ten p/owasp-top-ten
p/secrets p/secrets
p/javascript p/javascript
generateSarif: true generateSarif: results.sarif # specify the SARIF output file
# Upload SARIF to GitHub Code Scanning
- uses: github/codeql-action/upload-sarif@v3 - uses: github/codeql-action/upload-sarif@v3
with: with:
sarif_file: semgrep.sarif sarif_file: results.sarif
secrets-gitleaks: # Secrets exposure secrets-gitleaks: # Secrets exposure
runs-on: ubuntu-latest runs-on: ubuntu-latest