adoptium / aqa-tests

Home of test infrastructure for Adoptium builds
https://adoptium.net/aqavit
Apache License 2.0
125 stars 304 forks source link

Add semgrep code scanning on PRs. #5343

Closed steelhead31 closed 1 month ago

steelhead31 commented 1 month ago

As recommended by the security audit.

Adding a Github action to run the semgrep code scanner on each PR to identify any issues matching the rule set used in the Trail Of Bits audit.