Update semgrep.yml

.github/workflows/semgrep.yml

@@ -1,35 +1,35 @@
 name: Semgrep
 on:
-# Scan mainline branches and report all findings:
-push:
-branches: ["master", "main"]
-# Schedule the CI job (this method uses cron syntax):
-schedule:
-- cron: '20 17 * * *' # Sets Semgrep to scan every day at 17:20 UTC.
-# It is recommended to change the schedule to a random time.
+  # Scan mainline branches and report all findings:
+  push:
+    branches: ["master", "main"]
+  # Schedule the CI job (this method uses cron syntax):
+  schedule:
+    - cron: '20 17 * * *' # Sets Semgrep to scan every day at 17:20 UTC.
+      # It is recommended to change the schedule to a random time.
 
 jobs:
-semgrep:
+  semgrep:
 
-# User definable name of this GitHub Actions job.
-name: Scan
-# If you are self-hosting, change the following `runs-on` value:
-runs-on: ubuntu-latest
+    # User definable name of this GitHub Actions job.
+    name: Scan
+    # If you are self-hosting, change the following `runs-on` value:
+    runs-on: ubuntu-latest
 
-container:
-# A Docker image with Semgrep installed. Do not change this.
-image: returntocorp/semgrep
+    container:
+      # A Docker image with Semgrep installed. Do not change this.
+      image: returntocorp/semgrep
 
-# Skip any PR created by dependabot to avoid permission issues:
-if: (github.actor != 'dependabot[bot]')
+    # Skip any PR created by dependabot to avoid permission issues:
+    if: (github.actor != 'dependabot[bot]')
 
-steps:
-# Fetch project source with GitHub Actions Checkout.
-- uses: actions/checkout@v3
-# Run the "semgrep ci" command on the command line of the docker image.
-- run: semgrep ci
-env:
-# Connect to Semgrep Cloud Platform through your SEMGREP_APP_TOKEN.
-# Generate a token from Semgrep Cloud Platform > Settings
-# and add it to your GitHub secrets.
-SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+    steps:
+      # Fetch project source with GitHub Actions Checkout.
+      - uses: actions/checkout@v3
+      # Run the "semgrep ci" command on the command line of the docker image.
+      - run: semgrep ci
+        env:
+          # Connect to Semgrep Cloud Platform through your SEMGREP_APP_TOKEN.
+          # Generate a token from Semgrep Cloud Platform > Settings
+          # and add it to your GitHub secrets.
+          SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}