Merge pull request #165 from markcheret/markcheret/update/snyk.yml
This commit is contained in:
commit
e1ec2654dc
1 changed files with 6 additions and 1 deletions
7
.github/workflows/snyk.yml
vendored
7
.github/workflows/snyk.yml
vendored
|
@ -13,7 +13,12 @@ jobs:
|
||||||
|
|
||||||
- name: Run Snyk to check for vulnerabilities
|
- name: Run Snyk to check for vulnerabilities
|
||||||
uses: snyk/actions/php@master
|
uses: snyk/actions/php@master
|
||||||
|
continue-on-error: true # To make sure that SARIF upload gets called
|
||||||
env:
|
env:
|
||||||
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||||
with:
|
with:
|
||||||
args: --all-projects
|
args: --all-projects --sarif-file-output=snyk.sarif
|
||||||
|
- name: Upload result to GitHub Code Scanning
|
||||||
|
uses: github/codeql-action/upload-sarif@v1
|
||||||
|
with:
|
||||||
|
sarif_file: snyk.sarif
|
||||||
|
|
Reference in a new issue