fix(ci): semgrep job

aiven · Nov 16, 2023 · 5a0ce45 · 5a0ce45
1 parent e2ae2b3
commit 5a0ce45
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -31,9 +31,13 @@ jobs:
   semgrep:
     runs-on: ubuntu-latest
     if: (github.event_name == 'pull_request' && !contains(github.event.pull_request.labels.*.name, 'skip workflows')) || github.event_name == 'push'
+    container:
+      image: returntocorp/semgrep
     steps:
-      - uses: actions/checkout@v3
-      - uses: returntocorp/semgrep-action@v1
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - run: semgrep ci --config auto --no-suppress-errors
 
   make_lint:
     runs-on: ubuntu-latest