Skip to content

ci: duplicar builds pyinstaller por modo async #944

ci: duplicar builds pyinstaller por modo async

ci: duplicar builds pyinstaller por modo async #944

# This workflow file requires a free account on Semgrep.dev to
# manage rules, file ignores, notifications, and more.
#
# See https://semgrep.dev/docs
name: Semgrep
on:
push:
branches: [ master ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ master ]
schedule:
- cron: '19 5 * * 6'
jobs:
semgrep:
name: Scan
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
# Skip any PR created by dependabot to avoid permission issues
if: (github.actor != 'dependabot[bot]')
container:
image: semgrep/semgrep
steps:
# Fetch project source
- uses: actions/checkout@v4
- name: Run Semgrep
run: >
semgrep scan
--config p/security-audit
--config p/secrets
--sarif
--sarif-output=semgrep.sarif
# Upload findings to GitHub Advanced Security Dashboard [step 2/2]
- name: Upload SARIF file for GitHub Advanced Security Dashboard
uses: github/codeql-action/upload-sarif@v4
with:
sarif_file: semgrep.sarif
if: always()