chore: enables semgrep (#137)

OKTA-636330 chore: enables semgrep
okta · Aug 16, 2023 · 846418d · 846418d
1 parent 8235ba0
commit 846418d
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/.bacon.yml b/.bacon.yml
@@ -40,4 +40,11 @@ test_suites:
       timeout: '60'
       script_name: publish
       criteria: MERGE
+      queue_name: small
+    - name: semgrep
+      script_path: /root/okta/okta-vue/scripts
+      sort_order: '7'
+      timeout: '10'
+      script_name: semgrep
+      criteria: MERGE
       queue_name: small
diff --git a/scripts/semgrep.sh b/scripts/semgrep.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+set -eo pipefail
+
+cd ${OKTA_HOME}/${REPO}
+
+if ! sast_scan;
+then
+  exit ${FAILURE}
+fi
+
+exit ${SUCCESS}