Add Semgrep to CircleCI workflow (#588)

auth0 · Dec 11, 2021 · 61518d9 · 61518d9
1 parent 57d9eda
commit 61518d9
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -105,6 +105,14 @@ jobs:
     steps:
       - setup
       - run-psalm
+  semgrep:
+    docker:
+      - image: returntocorp/semgrep:latest
+    steps:
+      - checkout
+      - run:
+          name: Run static code analysis (Semgrep)
+          command: semgrep --config auto
   pest:
     parameters:
       php:
@@ -138,6 +146,7 @@ jobs:
 workflows:
   test:
     jobs:
+      - semgrep
       - phpinsights:
           matrix:
             parameters: