File tree Expand file tree Collapse file tree 1 file changed +10
-10
lines changed Expand file tree Collapse file tree 1 file changed +10
-10
lines changed Original file line number Diff line number Diff line change 5
5
6
6
---
7
7
8
- name : .NET Snyk Code analysis
8
+ name : Snyk Code analysis (.NET)
9
9
10
10
on : # yamllint disable-line rule:truthy
11
11
push :
@@ -16,19 +16,19 @@ on: # yamllint disable-line rule:truthy
16
16
jobs :
17
17
security :
18
18
runs-on : ubuntu-latest
19
+ permissions :
20
+ actions : read
21
+ contents : read
22
+ security-events : write
19
23
steps :
20
24
- uses : actions/checkout@master
21
25
- uses : snyk/actions/setup@master
22
- - name : Setup .NET
23
- uses : actions/setup-dotnet@v4
24
- with :
25
- dotnet-version : 8.0.x
26
- - name : Restore dependencies
27
- run : dotnet restore algorithm-exercises-csharp.sln
28
26
- name : Run Snyk to check for vulnerabilities
29
27
run : >
30
- snyk test
31
- algorithm-exercises-csharp/
32
- algorithm-exercises-csharp-test/
28
+ snyk code test --sarif-file-output=snyk-code.sarif
33
29
env :
34
30
SNYK_TOKEN : ${{ secrets.SNYK_TOKEN }}
31
+ - name : Upload result to GitHub Code Scanning
32
+ uses : github/codeql-action/upload-sarif@v3
33
+ with :
34
+ sarif_file : ' snyk-code.sarif'
You can’t perform that action at this time.
0 commit comments