Skip to content

Commit 7f573f5

Browse files
fix: add block_mode input for semgrep (#337)
This PR adds input block_mode for semgrep to enable failing pipeline if we have some findings in semgrep scan. Test run: https://github.com/splunk/splunk-add-on-for-google-workspace/actions/runs/10954006775
1 parent 9303824 commit 7f573f5

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

.github/workflows/reusable-build-test-release.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -331,6 +331,8 @@ jobs:
331331
uses: splunk/sast-scanning/.github/workflows/sast-scan.yml@main
332332
secrets:
333333
SEMGREP_KEY: ${{ secrets.SEMGREP_PUBLISH_TOKEN }}
334+
with:
335+
block_mode: "policy"
334336

335337
test-inventory:
336338
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)