ipvsix/opengrep repository overview

# Scan current directory
docker run --rm -v "$(pwd):/src" ipvsix/opengrep:latest scan --config auto /src

# Scan with custom rules
docker run --rm -v "$(pwd):/src" ipvsix/opengrep:latest scan --config /src/rules /src

# SARIF output
docker run --rm -v "$(pwd):/src" ipvsix/opengrep:latest scan --config auto --sarif --output /src/results.sarif /src

# JSON output
docker run --rm -v "$(pwd):/src" ipvsix/opengrep:latest scan --config auto --json --output /src/results.json /src

jobs:
  sast:
    runs-on: ubuntu-latest
    container:
      image: ipvsix/opengrep:latest
    steps:
      - uses: actions/checkout@v4
      - run: opengrep scan --config auto --sarif --output results.sarif .
      - uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: results.sarif

sast:
  image: ipvsix/opengrep:latest
  script:
    - opengrep scan --config auto --json --output gl-sast-report.json .
  artifacts:
    reports:
      sast: gl-sast-report.json

services:
  sast:
    image: ipvsix/opengrep:latest
    volumes:
      - ./:/src
    command: scan --config auto /src