diff --git a/.github/workflows/action_scanning.yml b/.github/workflows/action_scanning.yml index 7042d8a..83a557a 100644 --- a/.github/workflows/action_scanning.yml +++ b/.github/workflows/action_scanning.yml @@ -23,6 +23,9 @@ jobs: if: (github.actor != 'dependabot[bot]') steps: + - name: Checkout Code + uses: actions/checkout@v4 + - name: Checkout Workflow Config uses: actions/checkout@v4 env: @@ -30,9 +33,6 @@ jobs: with: repository: '${{ env.GH_REPO_OWNER }}/.github' path: action_scanning - - - name: Checkout Code - uses: actions/checkout@v4 - name: Run Actions semgrep scan run: semgrep scan --sarif --config action_scanning/semgrep-rules/actions >> semgrep-results-actions.sarif