Skip to content

chore(deps): update dependency botocore to v1.43.36 #743

chore(deps): update dependency botocore to v1.43.36

chore(deps): update dependency botocore to v1.43.36 #743

Workflow file for this run

---
name: Semgrep Analysis
on:
merge_group:
pull_request:
branches:
- main
types:
- opened
- synchronize
- reopened
push:
branches:
- main
schedule:
- cron: "0 0 * * *" # Run daily at midnight UTC
concurrency:
group: semgrep-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
permissions:
actions: read
checks: write
contents: read
pull-requests: write
security-events: write
jobs:
semgrep:
name: Semgrep Analysis
runs-on: ubuntu-latest
container:
image: returntocorp/semgrep@sha256:c180f0c93a17b420c0af5006214a29d3c747c5459c732b740191adf657dd0068 # v1.160.0
if: (github.actor != 'dependabot[bot]')
steps:
- name: Checkout git repository
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}
- name: Configure Git Safe Directory
run: git config --global --add safe.directory "${GITHUB_WORKSPACE}"
- name: Semgrep Analysis
env:
SEMGREP_RULES: >-
p/terraform
p/github-actions
p/golang
p/python
p/docker
p/secrets
p/security-audit
p/owasp-top-ten
p/supply-chain
SEMGREP_TIMEOUT: 300
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
semgrep ci \
--config="${SEMGREP_RULES}" \
--timeout="${SEMGREP_TIMEOUT}" \
--sarif --output=semgrep-results.sarif
- name: Upload SARIF to GitHub Security
if: always()
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
with:
sarif_file: semgrep-results.sarif