Semgrep #133

	# ============================================================================ #
	# S e m g r e p G i t H u b W o r k f l o w
	# ============================================================================ #

	# Generates code scanning alerts in GitHub's Security tab -> Code scanning alerts

	# https://semgrep.dev/docs/semgrep-ci/sample-ci-configs/#github-actions

	---
	name: Semgrep

	on:
	push:
	branches:
	- master
	- main
	pull_request:
	branches:
	- master
	- main
	workflow_dispatch:
	inputs:
	debug:
	type: boolean
	required: false
	default: false
	schedule:
	- cron: '0 0 * * 1'

	permissions:
	actions: read
	contents: read
	security-events: write

	concurrency:
	group: ${{ github.ref }}-${{ github.workflow }}
	cancel-in-progress: true

	jobs:
	semgrep:
	if: github.event.repository.fork == false
	name: Semgrep GitHub Security Tab
	uses: buluma/GitHub-Actions/.github/workflows/semgrep.yaml@master

Provide feedback