Skip to content

Commit 45478b3

Browse files
author
Gonzalo Diaz
committed
[CONFIG] [Gihub Actions] Snyk Container analysis: enable sarif output
1 parent c2b0582 commit 45478b3

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

.github/workflows/docker-image.yml

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,17 @@ jobs:
141141
with:
142142
image: ${{ env.IMAGE_NAME }}:${{ github.sha }}
143143
args: --file=Dockerfile
144-
144+
# yamllint disable rule:line-length
145+
# https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400
146+
- name: Replace security-severity undefined for license-related findings
147+
run: |
148+
sed -i 's/"security-severity": "undefined"/"security-severity": "0"/g' snyk.sarif
149+
sed -i 's/"security-severity": "null"/"security-severity": "0"/g' snyk.sarif
150+
# yamllint enable rule:line-length
151+
- name: Upload result to GitHub Code Scanning
152+
uses: github/codeql-action/upload-sarif@v3
153+
with:
154+
sarif_file: 'snyk.sarif'
145155
scan:
146156
name: "Trivy"
147157
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)