Skip to content

Commit a5b0fc3

Browse files
committed
fix: update snyk scan to utilize newest methodology
1 parent a455156 commit a5b0fc3

File tree

1 file changed

+6
-13
lines changed

1 file changed

+6
-13
lines changed

.github/workflows/snyk.yml

+6-13
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@ name: Snyk
22

33
on:
44
merge_group:
5+
workflow_dispatch:
56
pull_request:
67
types:
78
- opened
@@ -10,19 +11,19 @@ on:
1011
branches:
1112
- master
1213
schedule:
13-
- cron: "30 0 1,15 * *"
14+
- cron: '30 0 1,15 * *'
1415

1516
permissions:
16-
security-events: write
17-
actions: read
1817
contents: read
1918

2019
concurrency:
2120
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
2221
cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
2322

2423
jobs:
24+
2525
check:
26+
2627
name: Check for Vulnerabilities
2728
runs-on: ubuntu-latest
2829

@@ -34,14 +35,6 @@ jobs:
3435
with:
3536
ref: ${{ github.event.pull_request.head.sha || github.ref }}
3637

37-
- uses: snyk/actions/python-3.8@cdb760004ba9ea4d525f2e043745dfe85bb9077e # pinned 2023-06-13
38-
continue-on-error: true # Make sure the SARIF upload is called
38+
- uses: snyk/actions/python@b98d498629f1c368650224d6d212bf7dfa89e4bf # [email protected]
3939
env:
40-
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
41-
with:
42-
args: --sarif-file-output=snyk.sarif
43-
44-
- name: Upload result to GitHub Code Scanning
45-
uses: github/codeql-action/upload-sarif@v3
46-
with:
47-
sarif_file: snyk.sarif
40+
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

0 commit comments

Comments
 (0)