Skip to content

Commit 9271e93

Browse files
author
Gonzalo Diaz
committed
[CONFIG] [Gihub Actions] snyk script for code analysis updated.
1 parent 4c8aa00 commit 9271e93

File tree

1 file changed

+9
-4
lines changed

1 file changed

+9
-4
lines changed

.github/workflows/node-snyk.yml renamed to .github/workflows/snyk-code.yml

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,3 @@
1-
# yamllint disable rule:line-length
2-
# This workflow will build a .NET project
3-
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-net
4-
# yamllint enable rule:line-length
51
---
62

73
name: Snyk Code analysis
@@ -19,5 +15,14 @@ jobs:
1915
- uses: actions/checkout@master
2016
- name: Run Snyk to check for vulnerabilities
2117
uses: snyk/actions/node@master
18+
continue-on-error: true # To make sure that SARIF upload gets called
2219
env:
2320
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
21+
with:
22+
args: --sarif-file-output=snyk.sarif
23+
# yamllint disable rule:comments-indentation
24+
# - name: Upload result to GitHub Code Scanning
25+
# uses: github/codeql-action/upload-sarif@v2
26+
# with:
27+
# sarif_file: snyk.sarif
28+
# yamllint enable rule:comments-indentation

0 commit comments

Comments
 (0)