Merge pull request #97 from sir-gon/feature/ga-snyk

Feature/ga snyk

Author: sir-gon

.github/workflows/dotnet-snyk.yml renamed to .github/workflows/snyk-code.yml

@@ -16,6 +16,10 @@ on: # yamllint disable-line rule:truthy
 jobs:
   security:
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     steps:
       - uses: actions/checkout@master
       - uses: snyk/actions/setup@master
@@ -26,9 +30,16 @@ jobs:
       - name: Restore dependencies
         run: dotnet restore algorithm-exercises-csharp.sln
       - name: Run Snyk to check for vulnerabilities
+        continue-on-error: true # To make sure that SARIF upload gets called
         run: >
           snyk test
           algorithm-exercises-csharp/
+          algorithm-exercises-csharp-base/
           algorithm-exercises-csharp-test/
+          --sarif-file-output=snyk-code.sarif
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      - name: Upload result to GitHub Code Scanning
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: snyk-code.sarif

algorithm-exercises-csharp-base/algorithm-exercises-csharp-base.csproj

@@ -25,6 +25,7 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.Extensions.Logging" Version="8.0.0" />
     <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="8.0.0" />
+    <PackageReference Include="System.Text.Json" Version="8.0.4" />
   </ItemGroup>