Update workflows (#9650)

* Update semgrep.yaml to also run daily * update semgrep rule * fix workflows * Update .github/workflows/semgrep.yaml Co-authored-by: Balaji Arun <[email protected]> --------- Co-authored-by: Balaji Arun <[email protected]>
aptos-labs · Aug 14, 2023 · 73ffebf · 73ffebf
1 parent 29b1fc6
commit 73ffebf
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 0 deletions.
diff --git a/.github/linters/semgrep/pull-request-target-code-checkout.yaml b/.github/linters/semgrep/pull-request-target-code-checkout.yaml
@@ -47,6 +47,15 @@ rules:
             ...
             $JOBNAME:
               ...
+      - pattern-not-inside: |
+          needs: [..., permission-check, ...]
+          ...
+      - pattern-not-inside: |
+          needs:
+            ...
+            - permission-check
+            ...
+          ...
       - pattern-not-inside: |
           needs: [permission-check]
           ...

diff --git a/.github/workflows/docker-build-test.yaml b/.github/workflows/docker-build-test.yaml
@@ -111,6 +111,7 @@ jobs:
 
   # This job determines which files were changed
   file_change_determinator:
+    needs: [permission-check]
     runs-on: ubuntu-latest
     outputs:
       only_docs_changed: ${{ steps.determine_file_changes.outputs.only_docs_changed }}

diff --git a/.github/workflows/semgrep.yaml b/.github/workflows/semgrep.yaml
@@ -4,6 +4,8 @@ on:
   workflow_dispatch:
   pull_request:
     types: [labeled, opened, synchronize, reopened, auto_merge_enabled]
+  schedule:
+    - cron: '0 * * * *'
 
 jobs:
   semgrep:

diff --git a/.github/workflows/ts-sdk-e2e-tests.yaml b/.github/workflows/ts-sdk-e2e-tests.yaml
@@ -34,6 +34,7 @@ jobs:
 
   # This job determines which files were changed
   file_change_determinator:
+    needs: [permission-check]
     runs-on: ubuntu-latest
     outputs:
       only_docs_changed: ${{ steps.determine_file_changes.outputs.only_docs_changed }}