Repository navigation

APPSEC-553: Add README, Semgrep OSS, and scan for secrets workflows - #1

Merged

mantej merged 12 commits into

mainfrom

add-readme-and-semgrep

May 1, 2026

Merged

APPSEC-553: Add README, Semgrep OSS, and scan for secrets workflows#1
mantej merged 12 commits into
mainfrom
add-readme-and-semgrep

Commits on Apr 29, 2026
- Add README and Semgrep OSS workflow
  Mantej Rajpal
  committed
  4b0af5d
- Add Socket Security supply chain workflow
  Mantej Rajpal
  committed
  dbb0662
- Fix Socket CLI env var name: SOCKET_SECURITY_API_KEY -> SOCKET_SECURITY_API_TOKEN
  Mantej Rajpal
  committed
  d4fccc5
- Remove Socket Security workflow
  Mantej Rajpal
  committed
  ea0a557
Commits on Apr 30, 2026
- Rewrite scan-for-secrets to use TruffleHog, matching org standard
  Mantej Rajpal
  committed
  a2496d1
- Rename job display names to 'public'
  Mantej Rajpal
  committed
  d671d43
- Fix script injection: use env vars instead of direct context interpolation in run steps
  Mantej Rajpal
  committed
  a4ba75b
- Update README with workflow descriptions
  Mantej Rajpal
  committed
  f8c1b98
- Semgrep: pin image digest, switch to semgrep scan with --config=auto, continue-on-error
  Mantej Rajpal
  committed
  6680067
- Fix semgrep container image pin to correct 1.161.0 digest from Docker Hub
  Mantej Rajpal
  committed
  ee402d3
- Remove redundant if: always() now that continue-on-error is set
  Mantej Rajpal
  committed
  5814ba2
- Split semgrep ci (PR diff-aware) vs semgrep scan (scheduled full scan)
  Mantej Rajpal
  committed
  bb9b015