{"id":39006636,"url":"https://github.com/hoeg/semgrep-report","last_synced_at":"2026-01-17T17:17:36.447Z","repository":{"id":63140472,"uuid":"564888176","full_name":"hoeg/semgrep-report","owner":"hoeg","description":"Github action for reporting semgrep findings to PRs","archived":false,"fork":false,"pushed_at":"2024-06-21T19:37:58.000Z","size":1934,"stargazers_count":0,"open_issues_count":6,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-08-23T06:41:06.262Z","etag":null,"topics":["github-actions","pull-requests","security","semgrep"],"latest_commit_sha":null,"homepage":"","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hoeg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2022-11-11T18:35:11.000Z","updated_at":"2023-01-26T12:21:53.000Z","dependencies_parsed_at":"2024-03-01T09:49:23.923Z","dependency_job_id":null,"html_url":"https://github.com/hoeg/semgrep-report","commit_stats":{"total_commits":84,"total_committers":2,"mean_commits":42.0,"dds":"0.41666666666666663","last_synced_commit":"d082d7dc47edff9043e287a108c01d3f825415e1"},"previous_names":[],"tags_count":5,"template":false,"template_full_name":"actions/typescript-action","purl":"pkg:github/hoeg/semgrep-report","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hoeg%2Fsemgrep-report","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hoeg%2Fsemgrep-report/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hoeg%2Fsemgrep-report/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hoeg%2Fsemgrep-report/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hoeg","download_url":"https://codeload.github.com/hoeg/semgrep-report/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hoeg%2Fsemgrep-report/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28512306,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-17T13:38:16.342Z","status":"ssl_error","status_checked_at":"2026-01-17T13:37:44.060Z","response_time":85,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["github-actions","pull-requests","security","semgrep"],"created_at":"2026-01-17T17:17:34.885Z","updated_at":"2026-01-17T17:17:36.428Z","avatar_url":"https://github.com/hoeg.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Semgrep Reporting Action\n\nReport your Semgrep findings back to the PR where they have been found.\n\n## Add this action to your workflow\n\nWe show an example of how you can add this step to your workflow.\nNote that you have to setup and run the Semgrep scanning yourself.\nThis step only parses the result and reports back to the PR that is being run.\nRemember to only set \n\n```yaml\non:\n  pull_request: {}\n```\n\nin your action as the action looks for comparison information using `github.context.payload.pull_request`.\n\n```yaml\n- name: Checkout\n  uses: actions/checkout@v3\n- name: Scan\n  run: semgrep scan -f rules -l tf --json --output=semgrep.json .\n- uses: hoeg/semgrep-report@v1\n  with:\n    github_secret: ${{secrets.GITHUB_TOKEN}}\n    report_path: ./semgrep.json\n    base_path: /\n```\n\n`base_path` is optional and only needs to be set if you have not checked out the repository to `/`\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhoeg%2Fsemgrep-report","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhoeg%2Fsemgrep-report","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhoeg%2Fsemgrep-report/lists"}