A fast, open-source, static analysis tool for profoundly improving software security and reliability.
Write custom Node.js code and use any of the 400k+ npm packages available. Refer to the Pipedream Node docs to learn more.
Returns a list of findings for a specified deployment. See the documentation
Returns a list of projects for a given deployment slug. See the documentation
The Semgrep API enables developers to integrate powerful static code analysis within their workflows on Pipedream. Semgrep scans codebases for bugs, security issues, and code standards, making it a vital tool for maintaining code quality. On Pipedream, you can automate code reviews, enforce coding standards, and trigger alerts or actions based on scan results. By connecting Semgrep to Pipedream, you can streamline your CI/CD pipelines, notify teams of critical issues, and even auto-fix problems under certain conditions.
import { axios } from "@pipedream/platform"
export default defineComponent({
props: {
semgrep: {
type: "app",
app: "semgrep",
}
},
async run({steps, $}) {
return await axios($, {
url: `https://semgrep.dev/api/v1/deployments`,
headers: {
Authorization: `Bearer ${this.semgrep.$auth.api_token}`,
},
})
},
})
Develop, run and deploy your Node.js code in Pipedream workflows, using it between no-code steps, with connected accounts, or integrate Data Stores and File Stores.
This includes installing NPM packages, within your code without having to manage a package.json
file or running npm install
.
Below is an example of installing the axios
package in a Pipedream Node.js code step. Pipedream imports the axios
package, performs the API request, and shares the response with subsequent workflow steps:
// To use previous step data, pass the `steps` object to the run() function
export default defineComponent({
async run({ steps, $ }) {
// Return data to use it in future steps
return steps.trigger.event
},
})