Skip to content

Update versioning.mdx #3168

Update versioning.mdx

Update versioning.mdx #3168

# The Semgrep scan is set to run diffs only on PRs, but full scans
# weekly on Monday. A series of gitops bots have to be ignored.
name: Semgrep
on:
workflow_dispatch: {}
pull_request:
types: [opened, reopened, synchronize]
merge_group:
schedule:
- cron: '0 0 * * 1'
push:
branches:
- main
- master
jobs:
semgrep:
name: semgrep/ci
runs-on: ubuntu-latest
permissions:
packages: read
contents: read
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
container:
image: ghcr.io/temporalio/semgrep:latest
credentials:
username: ${{ github.actor }}
password: ${{ secrets.github_token }}
if: github.actor != 'dependabot[bot]' && github.actor != 'github-actions' && github.event_name != 'merge_group'
steps:
- uses: actions/checkout@v4
- name: Run semgrep ci
run: semgrep ci