File tree Expand file tree Collapse file tree 2 files changed +12
-2
lines changed Expand file tree Collapse file tree 2 files changed +12
-2
lines changed Original file line number Diff line number Diff line change @@ -23,7 +23,7 @@ concurrency:
23
23
24
24
jobs :
25
25
analyze :
26
- name : Analyze
26
+ name : Check for Vulnerabilities
27
27
runs-on : ubuntu-latest
28
28
29
29
strategy :
Original file line number Diff line number Diff line change 13
13
- cron : " 30 0 1,15 * *"
14
14
15
15
permissions :
16
+ security-events : write
17
+ actions : read
16
18
contents : read
17
19
18
20
concurrency :
41
43
with :
42
44
ref : ${{ github.event.pull_request.head.sha || github.ref }}
43
45
44
- - uses : snyk/actions/php@b98d498629f1c368650224d6d212bf7dfa89e4bf # pin@0.4.0
46
+ - uses : snyk/actions/python-3.7@b98d498629f1c368650224d6d212bf7dfa89e4bf # pin@0.4.0
47
+ continue-on-error : true # Make sure the SARIF upload is called
45
48
env :
46
49
SNYK_TOKEN : ${{ secrets.SNYK_TOKEN }}
50
+ with :
51
+ args : --sarif-file-output=snyk.sarif
52
+
53
+ - name : Upload result to GitHub Code Scanning
54
+ uses : github/codeql-action/upload-sarif@v2
55
+ with :
56
+ sarif_file : snyk.sarif
You can’t perform that action at this time.
0 commit comments