Skip to content
This repository was archived by the owner on Apr 9, 2024. It is now read-only.

[RFE] Variable to explicitly control full/diff scan #220

Open
zabbal opened this issue Mar 9, 2021 · 1 comment
Open

[RFE] Variable to explicitly control full/diff scan #220

zabbal opened this issue Mar 9, 2021 · 1 comment

Comments

@zabbal
Copy link

zabbal commented Mar 9, 2021

By default semgrep-action scans only the diff added in the PR. That's very neat optimization and it probably should stay that way by default.

However for the projects just adopting semgrep CI integration it would be great to be able to explicitly configure full source code scan for CI running on PR.

Right now it's possible by changing trigger event to "push" instead of "pull_request" and switching scan policy to blocking mode but that's far from obvious for newcomers.

Having explicit variable (similar to 'auditOn' for example) to select between full and partial scans (defaulting to partial to preserve the current behavior) would be great to streamline initial integration.

@mykter
Copy link

mykter commented Nov 24, 2021

Right now it's possible by changing trigger event to "push" instead of "pull_request" and switching scan policy to blocking mode

And for GitLab, it looks like it's not possible at all. ref #352

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants