https://github.com/g-wilson/action-semgrep

reviewdog action for semgrep - lightweight static analysis for many languages with rules that look like source code.
https://github.com/g-wilson/action-semgrep

reviewdog semgrep

Last synced: 7 months ago
JSON representation

reviewdog action for semgrep - lightweight static analysis for many languages with rules that look like source code.

• Host: GitHub
• URL: https://github.com/g-wilson/action-semgrep
• Owner: g-wilson
• License: mit
• Created: 2020-09-24T13:34:52.000Z (almost 6 years ago)
• Default Branch: master
• Last Pushed: 2022-10-31T10:10:15.000Z (almost 4 years ago)
• Last Synced: 2025-10-09T18:06:53.722Z (10 months ago)
• Topics: reviewdog, semgrep
• Language: Shell
• Homepage:
• Size: 19.5 KB
• Stars: 2
• Watchers: 1
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# action-semgrep

[![Test](https://github.com/g-wilson/action-semgrep/workflows/Test/badge.svg)](https://github.com/g-wilson/action-semgrep/actions?query=workflow%3ATest)

[![reviewdog](https://github.com/g-wilson/action-semgrep/workflows/reviewdog/badge.svg)](https://github.com/g-wilson/action-semgrep/actions?query=workflow%3Areviewdog)

[![depup](https://github.com/g-wilson/action-semgrep/workflows/depup/badge.svg)](https://github.com/g-wilson/action-semgrep/actions?query=workflow%3Adepup)

[![release](https://github.com/g-wilson/action-semgrep/workflows/release/badge.svg)](https://github.com/g-wilson/action-semgrep/actions?query=workflow%3Arelease)

[![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/g-wilson/action-semgrep?logo=github&sort=semver)](https://github.com/g-wilson/action-semgrep/releases)

[![action-bumpr supported](https://img.shields.io/badge/bumpr-supported-ff69b4?logo=github&link=https://github.com/haya14busa/action-bumpr)](https://github.com/haya14busa/action-bumpr)

[reviewdog](https://github.com/reviewdog/reviewdog) action for [semgrep](https://github.com/returntocorp/semgrep) - lightweight static analysis for many languages with rules that look like source code.

## Usage

```yaml

name: reviewdog-semgrep

on: [pull_request]

jobs:

  # TODO: change `linter_name`.

  linter_name:

    name: runner / 

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v2

      - uses: g-wilson/action-semgrep@v1

        with:

          github_token: ${{ secrets.github_token }}

          # Change reviewdog reporter if you need [github-pr-check,github-check,github-pr-review].

          reporter: github-pr-review

          # Change reporter level if you need. GitHub Status Check won't become failure with warning.

          level: warning

          # Change filter mode if you need [added,diff_context,file,nofilter].

          filter_mode: file

          # Semgrep config string (URL, path to file, or policy)

          semgrep_config: p/gosec

```