capyadmin/ci-workflows
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(sast): disable semgrep metrics via the env var only

Browse source
This commit is contained in:
James Johnson 2026-10-18 21:37:06 +01:00
parent 1e0113c05f
commit 542d844321
No known key found for this signature in database
GPG key ID: 4DD5E522F8940E76
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
.forgejo/workflows/sast.yml
View file

@ -20,9 +20,12 @@ jobs:
- name: semgrep - name: semgrep
env: env:
CONFIGS: ${{ inputs.config }} CONFIGS: ${{ inputs.config }}
# The env var, not --metrics=off: semgrep 1.90 still prints its
# "reports pseudonymous rule metrics" notice for registry configs
# when given only the flag, and does not with the env var.
SEMGREP_SEND_METRICS: "off" SEMGREP_SEND_METRICS: "off"
run: | run: |
semgrep --version semgrep --version
set -- scan --error --metrics=off --disable-version-check set -- scan --error --disable-version-check
for c in $CONFIGS; do set -- "$@" --config "$c"; done for c in $CONFIGS; do set -- "$@" --config "$c"; done
semgrep "$@" semgrep "$@"