From 2b39570a2dde8274b326559db4b4c21fe19ce821 Mon Sep 17 00:00:00 2001 From: Michael Long Date: Thu, 18 Apr 2024 11:17:06 -0400 Subject: [PATCH] test upload/download --- .github/workflows/scan_repo_with_semgrep.yml | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/.github/workflows/scan_repo_with_semgrep.yml b/.github/workflows/scan_repo_with_semgrep.yml index 2f7ba5d..edc451b 100644 --- a/.github/workflows/scan_repo_with_semgrep.yml +++ b/.github/workflows/scan_repo_with_semgrep.yml @@ -12,10 +12,20 @@ jobs: - name: Checkout this repository uses: actions/checkout@v4 - - name: semgrep scan - run: | + - name: full scan + run: | semgrep \ --sarif --output report.sarif \ --metrics=off \ --config="p/default" - + + - name: save report as pipeline artifact + uses: actions/upload-artifact@v4.3.2 + with: + name: report.sarif + path: report.sarif + + - name: Download report + uses: actions/download-artifact@v4.1.5 + with: + name: report.sarif