fix: repair failing tests and type errors across the monorepo #1

	name: security

	on:
	pull_request:
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	sast:
	# User definable name of this GitHub Actions job.
	name: sast
	# If you are self-hosting, change the following `runs-on` value:
	runs-on: ubuntu-latest

	container:
	# A Docker image with Semgrep installed. Do not change this.
	image: semgrep/semgrep

	# Skip any PR created by dependabot to avoid permission issues:
	if: (github.actor != 'dependabot[bot]')

	steps:
	# Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	# Run Semgrep with configs provided by repositories.yaml (expanded to repeated --config flags)
	- run: semgrep ci --sarif --config p/ci --timeout 600 > semgrep.sarif
	continue-on-error: true

	- name: Upload SARIF as artifact
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	if: always()
	with:
	name: semgrep-sarif
	path: semgrep.sarif

	- name: Set ci/security status based on results
	if: always()
	run: \|
	if grep -q '"ruleId"' semgrep.sarif; then
	echo "Vulnerabilities found"
	exit 1
	else
	echo "No vulnerabilities found"
	fi

Navigation Menu