feat(security): pin semgrep to version 1.38.2 [SEC-8536]

time-loop · Sep 5, 2023 · 68c2a22 · 68c2a22
1 parent 34963a8
commit 68c2a22
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
diff --git a/src/semgrep-workflow.ts b/src/semgrep-workflow.ts
@@ -18,7 +18,7 @@ export module semgrepWorkflow {
         name: 'Scan',
         'runs-on': 'ubuntu-latest',
         container: {
-          image: 'returntocorp/semgrep',
+          image: 'returntocorp/semgrep@sha256:6c7ab81e4d1fd25a09f89f1bd52c984ce107c6ff33affef6ca3bc626a4cc479b',
         },
         steps: [
           {

diff --git a/test/__snapshots__/semgrep-workflow.test.ts.snap b/test/__snapshots__/semgrep-workflow.test.ts.snap