From 9c7c21a31a1d19ecae5d0e91381885da1ba1a237 Mon Sep 17 00:00:00 2001
From: Erin Browning <ebrowning@makenotion.com>
Date: Thu, 11 Jan 2024 16:35:47 -0800
Subject: [PATCH 1/2] Add a semgrep workflow

---
 .github/workflows/semgrep.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 .github/workflows/semgrep.yml

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
new file mode 100644
index 00000000..3d2ef923
--- /dev/null
+++ b/.github/workflows/semgrep.yml
@@ -0,0 +1,22 @@
+name: Security - Semgrep
+
+on:
+  pull_request: {}
+  workflow_dispatch: {}
+  push:
+    branches-ignore: ["main"]
+  schedule:
+    - cron: '20 17 * * *'
+
+jobs:
+  semgrep:
+    name: semgrep/ci 
+    runs-on: ubuntu-latest
+    container:
+      image: returntocorp/semgrep
+    timeout-minutes: 480
+    steps:
+      - uses: actions/checkout@v3
+      - run: semgrep ci
+        env:
+          SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP }}

From c00382e6185efc97d5afb69cb34847aeb5b6a632 Mon Sep 17 00:00:00 2001
From: Erin Browning <ebrowning@makenotion.com>
Date: Thu, 11 Jan 2024 16:48:57 -0800
Subject: [PATCH 2/2] fix formatting per prettier

---
 .github/workflows/semgrep.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 3d2ef923..de01e1f4 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -6,11 +6,11 @@ on:
   push:
     branches-ignore: ["main"]
   schedule:
-    - cron: '20 17 * * *'
+    - cron: "20 17 * * *"
 
 jobs:
   semgrep:
-    name: semgrep/ci 
+    name: semgrep/ci
     runs-on: ubuntu-latest
     container:
       image: returntocorp/semgrep