Move access policy management from Control API to SQL GRANT/REVOKE #145

	name: Semgrep Scan

	on:
	workflow_call:
	push:
	pull_request:
	schedule:
	- cron: '17 6 * * *'

	jobs:
	semgrep:
	name: Semgrep Analysis
	runs-on: ubuntu-latest
	permissions:
	contents: read
	id-token: write
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set Up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.13"

	- name: Install Semgrep, rugo, and upload client
	run: python -m pip install --no-cache-dir semgrep rugo "opteryx-upload>=0.6.0"

	- name: Run Semgrep
	run: semgrep scan --config=auto --json --output=semgrep-report.json

	- name: Upload results to Opteryx
	env:
	UPLOAD_CLIENT: ${{ secrets.UPLOAD_CLIENT }}
	UPLOAD_TOKEN: ${{ secrets.UPLOAD_TOKEN }}
	run: python scripts/upload_semgrep_results.py semgrep-report.json

Navigation Menu