Managed by boost-sandbox/terraform-entropy

Author: fproulx-boostsecurity

.github/workflows/boost.yml

@@ -15,7 +15,7 @@ jobs:
         uses: boostsecurityio/boostsec-scanner-github@v4
         with:
           api_token: ${{ secrets.BOOST_API_TOKEN }}
-          registry_module: boostsecurityio/native-scanner
+          registry_module: boostsecurityio/scanner
 
   boost-sbom:
     name: SBOM
@@ -28,3 +28,18 @@ jobs:
         with:
           api_token: ${{ secrets.BOOST_API_TOKEN }}
           registry_module: boostsecurityio/trivy-sbom
+
+  boost-semgrep:
+    name: semgrep
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Run semgrep
+        uses: boostsecurityio/boostsec-scanner-github@v4
+        with:
+          api_token: ${{ secrets.BOOST_API_TOKEN }}
+          registry_module: boostsecurityio/semgrep
+        env:
+          SEMGREP_RULES: p/ci
+