build(deps): bump peter-evans/create-pull-request from 5 to 6 #48

	name: Semgrep

	on:
	# Scan changed files in PRs, block on new issues only (existing issues ignored)
	pull_request: {}

	# Scan all files on branches, block on any issues
	push:
	branches: ["main"]

	release:
	types: [published]

	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	jobs:
	semgrep:
	name: scan
	runs-on: ubuntu-latest
	container:
	image: returntocorp/semgrep
	# Skip any PR created by dependabot to avoid permission issues
	if: (github.actor != 'dependabot[bot]')
	steps:
	# Fetch project source
	- name: Checkout repositories
	uses: actions/checkout@v4

	- name: Run Semgrep
	run: semgrep ci
	env:
	SEMGREP_RULES: \|
	p/security-audit
	p/secrets
	p/ci
	p/r2c
	p/r2c-ci
	p/docker
	p/dockerfile
	p/command-injection
	p/php

Provide feedback