Skip to content

Commit ecec62a

Browse files
committed
fail semgrep on error
1 parent 6172edb commit ecec62a

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/semgrep.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,13 +47,13 @@ jobs:
4747
if [ $EXIT_CODE -gt 1 ]; then
4848
echo "::error::Semgrep run encounters an error"
4949
cat /tmp/semgrep-results.json
50+
exit 1
5051
fi
5152
5253
HIGH_CRITICAL=$(jq '[.results[] | select(.extra.severity == "HIGH" or .extra.severity == "CRITICAL")] | length' /tmp/semgrep-results.json)
5354
if [ "$HIGH_CRITICAL" -gt 0 ]; then
5455
echo "has_high_critical=true" >> "$GITHUB_OUTPUT"
5556
fi
56-
continue-on-error: true
5757
5858
- if: steps.semgrep.outputs.has_findings == 'true'
5959
uses: int128/comment-action@66317511bc86c47bd51e03059040e8a460a167b8

0 commit comments

Comments
 (0)