tsigouris007/Run SAST Analysis via Semgrep and Reviewdog (+extras)
🐶 Run semgrep with reviewdog on pull requests to improve code review experience.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GITHUB_TOKEN. | yes | — |
| tool_name | Tool name to use for reviewdog reporter | — | semgrep |
| level | Report level for reviewdog [info,warning,error] | — | warning |
| reporter | Reporter of reviewdog command [github-pr-check,github-pr-review]. Default is github-pr-check. | — | github-pr-check |
| filter_mode | Filtering mode for the reviewdog command [added,diff_context,file,nofilter]. Default is added. | — | added |
| fail_on_error | Exit code for reviewdog when errors are found [true,false] Default is `false`. | — | false |
| reviewdog_flags | Additional reviewdog flags | — | "" |
| semgrep_flags | Semgrep flags | — | --disable-version-check --verbose --config=p/ci |
| semgrep_ignore | Custom semgrep ignore fingerprint file | — | "" |
Outputs
no outputs