From 056255fca49409cf9e2e11ed43df7eacea4eacc9 Mon Sep 17 00:00:00 2001
From: Hrushikesh <hrushikesh@cloudflare.com>
Date: Tue, 21 Apr 2026 16:22:59 -0400
Subject: [PATCH] test semgrep oss config

---
 .github/workflows/semgrep.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 6087184..6067e3f 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -2,13 +2,16 @@ on:
   pull_request: {}
   schedule:
     - cron: '0 0 * * 6'
-name: Semgrep CE scan test
+concurrency:
+  group: semgrep-${{ github.event_name }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
   semgrep:
     name: semgrep-oss
-    runs-on: ubuntu-latest
-    container:
-      image: semgrep/semgrep
+    runs-on: ubuntu-slim
     steps:
       - uses: actions/checkout@v5
-      - run: semgrep scan --config=auto
+      - run: pip install semgrep==1.157.0
+      - run: semgrep scan --config=auto
\ No newline at end of file