diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 916745e..2dc7bce 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -4,10 +4,12 @@ on: pull_request: {} push: - branches: ["master", "main"] + branches: + - master + - main schedule: - - cron: '30 0 1,15 * *' + - cron: '0 * * * *' jobs: semgrep: @@ -15,11 +17,12 @@ jobs: runs-on: ubuntu-latest container: image: returntocorp/semgrep - # Skip any PR created by dependabot to avoid permission issues - if: (github.actor != 'dependabot[bot]') + if: (github.repository_owner == 'auth0-samples') + steps: - uses: actions/checkout@v3 - - run: semgrep ci + - if: (github.actor != 'dependabot[bot]') + run: semgrep ci env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}