name: Semgrep

on:
  pull_request: { }
  push:
      branches: ["develop"]

jobs:
  semgrep:
    name: Frappe Linter
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: returntocorp/semgrep-action@v1
        env:
            SEMGREP_TIMEOUT: 120
        with:
            config: >-
              r/python.lang.correctness
              .github/helper/semgrep_rules