---
executor: semgrep
steps:
  - checkout
  - attach_workspace:
      at: .
  - run:
      name: Run Semgrep Rules
      command: |
        # Alpine images can't run the make file due to a bash requirement. Run
        # semgrep explicitly here. 
        export PATH="$HOME/.local/bin:$PATH" 
        echo -n 'Semgrep Version: '
        semgrep --version
        semgrep --error --include '*.go' --exclude 'vendor' -f tools/semgrep/ci .