diff --git a/.github/workflows/snyk-security.yml b/.github/workflows/snyk-security.yml index 578dcae..71aa967 100644 --- a/.github/workflows/snyk-security.yml +++ b/.github/workflows/snyk-security.yml @@ -54,15 +54,18 @@ jobs: # Runs Snyk Code (SAST) analysis and uploads result into GitHub. # Use || true to not fail the pipeline - name: Snyk Code test + shell: bash run: snyk code test --sarif > snyk-code.sarif # || true # Runs Snyk Open Source (SCA) analysis and uploads result to Snyk. - name: Snyk Open Source monitor + shell: bash run: snyk monitor --all-projects # Runs Snyk Infrastructure as Code (IaC) analysis and uploads result to Snyk. # Use || true to not fail the pipeline. - name: Snyk IaC test and report + shell: bash run: snyk iac test --report # || true # Build the docker image for testing