From 22417b2f8c7a80a62766794bcaa9d2fcca1d4175 Mon Sep 17 00:00:00 2001 From: Bill Napier Date: Tue, 1 Apr 2025 17:56:27 +0000 Subject: [PATCH] Ensure that semgrep always returns true so that we are not actually blocking the PRs. --- .github/workflows/action_scanning.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/action_scanning.yml b/.github/workflows/action_scanning.yml index 790ac00..c352259 100644 --- a/.github/workflows/action_scanning.yml +++ b/.github/workflows/action_scanning.yml @@ -25,7 +25,7 @@ jobs: repository: 'google/github-team' path: action_scanning - name: 'Run Actions semgrep scan' - run: 'semgrep scan --sarif --config action_scanning/semgrep-rules --config "p/github-actions" + run: 'semgrep scan --sarif --config action_scanning/semgrep-rules --config "p/github-actions" || true >> semgrep-results-actions.sarif' - name: 'Save Actions SARIF results as artifact' uses: 'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02' # ratchet:actions/upload-artifact@v4