diff --git a/.github/workflows/scan_repo_with_semgrep.yml b/.github/workflows/scan_repo_with_semgrep.yml index 2f7ba5d..edc451b 100644 --- a/.github/workflows/scan_repo_with_semgrep.yml +++ b/.github/workflows/scan_repo_with_semgrep.yml @@ -12,10 +12,20 @@ jobs: - name: Checkout this repository uses: actions/checkout@v4 - - name: semgrep scan - run: | + - name: full scan + run: | semgrep \ --sarif --output report.sarif \ --metrics=off \ --config="p/default" - + + - name: save report as pipeline artifact + uses: actions/upload-artifact@v4.3.2 + with: + name: report.sarif + path: report.sarif + + - name: Download report + uses: actions/download-artifact@v4.1.5 + with: + name: report.sarif