Skip to content

Bump aiohttp from 3.9.5 to 3.10.2 #43

Bump aiohttp from 3.9.5 to 3.10.2

Bump aiohttp from 3.9.5 to 3.10.2 #43

Workflow file for this run

---
# Name of this GitHub Actions workflow.
name: Semgrep OSS scan
on:
# Scan changed files in PRs (diff-aware scanning):
pull_request: {}
# Scan on-demand through GitHub Actions interface:
workflow_dispatch: {}
# Scan mainline branches and report all findings:
push:
branches: ["main"]
jobs:
semgrep:
# User definable name of this GitHub Actions job.
name: semgrep-oss/scan
# If you are self-hosting, change the following `runs-on` value:
runs-on: ubuntu-latest
container:
# A Docker image with Semgrep installed. Do not change this.
image: semgrep/semgrep
# Skip any PR created by dependabot to avoid permission issues:
if: (github.actor != 'dependabot[bot]')
steps:
# Fetch project source with GitHub Actions Checkout.
- uses: actions/checkout@v3
# Run the "semgrep scan" command on the command line of the docker image.
- run: >
semgrep scan --config test/semgrep-rules.yml
--config "p/r2c-security-audit"
--config "p/r2c-bug-scan"
--config "p/secrets"
--config "p/dockerfile"