Automated metadata generation using genAI #2577

	name: semgrep

	on:
	workflow_dispatch:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	- release/*
	- main-v2
	- v2m*

	permissions:
	contents: read

	jobs:
	semgrep:
	runs-on: ubuntu-latest

	container:
	# A Docker image with Semgrep installed. Do not change this.
	image: returntocorp/semgrep

	# Skip any PR created by dependabot to avoid permission issues:
	if: (github.actor != 'dependabot[bot]')

	steps:
	# Fetch project source with GitHub Actions Checkout.
	- uses: actions/checkout@v4
	# Run the "semgrep ci" command on the command line of the docker image.
	- run: semgrep scan --error --verbose --metrics=off
	env:
	# Add the rules that Semgrep uses by setting the SEMGREP_RULES environment variable.
	SEMGREP_RULES: p/default # more at semgrep.dev/explore

Provide feedback