APPSEC-553: Add README, Semgrep OSS, and scan for secrets workflows#1

Merged

mantej merged 12 commits into

mainfrom

add-readme-and-semgrep

May 1, 2026

Commits on Apr 30, 2026

Rewrite scan-for-secrets to use TruffleHog, matching org standard
mantej
committed
Rename job display names to 'public'
mantej
committed
Fix script injection: use env vars instead of direct context interpolation in run steps
mantej
committed
Update README with workflow descriptions
mantej
committed
Semgrep: pin image digest, switch to semgrep scan with --config=auto, continue-on-error
mantej
committed
Fix semgrep container image pin to correct 1.161.0 digest from Docker Hub
mantej
committed
Remove redundant if: always() now that continue-on-error is set
mantej
committed
Split semgrep ci (PR diff-aware) vs semgrep scan (scheduled full scan)
mantej
committed