build(deps): bump org.sonarqube from 5.0.0.4638 to 5.1.0.4882 #36

	# 是一个快速、开源的静态分析工具，用于在编辑、提交和 CI 时查找错误并执行代码标准

	name: Semgrep
	on:
	workflow_dispatch: {}
	pull_request: {}
	push:
	branches:
	- master
	paths:
	- .github/workflows/semgrep.yml
	#schedule:
	# # random HH:MM to avoid a load spike on GitHub Actions at 00:00
	# - cron: '17 6 * * *'

	jobs:
	semgrep:
	name: semgrep/ci
	runs-on: ubuntu-22.04
	env:
	SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
	container:
	image: returntocorp/semgrep
	steps:
	- uses: actions/[email protected]
	- run: semgrep ci

Provide feedback