fix pipeline

Author: ondbeh

.github/workflows/semgrep.yaml

@@ -10,26 +10,27 @@ jobs:
     runs-on: ubuntu-latest
     # Skip any PR created by dependabot to avoid permission issues
     if: (github.actor != 'dependabot[bot]')
+    container:
+      image: semgrep/semgrep:latest
     steps:
       # Fetch project source
       - uses: actions/checkout@v7
 
-      - uses: returntocorp/semgrep-action@v1
-        with:
-          config: >- # more at semgrep.dev/explore
-            p/security-audit
-            p/secrets
-            p/ci
-            p/r2c
-            p/r2c-ci
-            p/docker
-            p/dockerfile
-            p/command-injection
-          generateSarif: "1"
+      - name: Run Semgrep
+        run: |
+          semgrep scan \
+            --sarif \
+            --output=semgrep.sarif \
+            --config="p/security-audit" \
+            --config="p/secrets" \
+            --config="p/ci" \
+            --config="p/default" \
+            --config="p/docker" \
+            --config="p/dockerfile" \
+            --config="p/command-injection"
 
       # Upload findings to GitHub Advanced Security Dashboard [step 2/2]
       - name: Upload SARIF file for GitHub Advanced Security Dashboard
         uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
-          sarif_file: semgrep.sarif
-        if: always()
+          sarif_file: semgrep.sarif