diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 86b817a..639d58b 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -30,17 +30,12 @@ jobs: with: repository: zeta-chain/semgrep-utilities path: semgrep-utilities - - #- run: ls -al semgrep-utilities/utilities/github-sarif-helper/src/ - - #- run: semgrep ci --output semgrep-findings.json --json - - - run: python semgrep-utilities/utilities/github-sarif-helper/src/semgrep-json-to-sarif.py --help - #- run: curl -o semgrep-json-to-sarif.py https://raw.githubusercontent.com/r2c-CSE/semgrep-utilities/refs/heads/main/utilities/github-sarif-helper/src/semgrep-json-to-sarif.py - #- run: python semgrep-json-to-sarif.py --json semgrep-findings.json --sarif semgrep-github.sarif + - run: semgrep ci --json --output semgrep-findings.json + + - run: python semgrep-utilities/utilities/github-sarif-helper/src/semgrep-json-to-sarif.py --json semgrep-findings.json --sarif semgrep-github.sarif - # - name: Upload SARIF file for GitHub Advanced Security Dashboard - # uses: github/codeql-action/upload-sarif@v3 - # with: - # sarif_file: semgrep-github.sarif + - name: Upload SARIF file for GitHub Advanced Security Dashboard + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: semgrep-github.sarif