diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml new file mode 100644 index 00000000..076a3901 --- /dev/null +++ b/.github/workflows/semgrep.yml @@ -0,0 +1,18 @@ +name: Semgrep +on: + pull_request: + workflow_dispatch: + +jobs: + semgrep: + name: Run Semgrep + runs-on: ubuntu-latest + timeout-minutes: 30 + container: + # A Docker image with Semgrep installed. Do not change this. + image: returntocorp/semgrep + steps: + - uses: actions/checkout@v4 + - run: semgrep ci + env: + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN_PUBLIC }} diff --git a/README.md b/README.md index 2f81e9e1..5e66f5b6 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,7 @@ +Update June 19, 2023: Stitches is no longer actively maintained due to changes in the React ecosystem and maintainer availability. You can read more here. + +--- + stitches