Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,6 @@
name: CodeQL
on:
pull_request:
push:
branches: [main]
schedule:
- cron: '0 6 * * 1' # weekly, Monday morning

Expand Down
76 changes: 0 additions & 76 deletions .github/workflows/playwright.yml

This file was deleted.

7 changes: 6 additions & 1 deletion .github/workflows/security.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,12 +17,17 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
- name: Cache pip packages for Semgrep
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
with:
path: ~/.cache/pip
key: ${{ runner.os }}-semgrep-1.166.0
- name: Semgrep
# semgrep scan runs locally with the default ruleset and exits non-zero
# on any finding. semgrep ci requires a SEMGREP_APP_TOKEN and uses
# cloud-based CI mode; it is not used here to avoid token dependency.
run: |
pip install semgrep
pip install semgrep==1.166.0
semgrep scan --config p/default --error

trivy:
Expand Down
Loading