Skip to content

Commit 83fba66

Browse files
author
Gonzalo Diaz
committed
[CONFIG] [Github-Actions] Snyk Open Source. Modified. Sarif output enabled.
1 parent 5ef7ec7 commit 83fba66

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

.github/workflows/dotnet-snyk.yml renamed to .github/workflows/snyk-code.yml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,10 @@ on: # yamllint disable-line rule:truthy
1616
jobs:
1717
security:
1818
runs-on: ubuntu-latest
19+
permissions:
20+
actions: read
21+
contents: read
22+
security-events: write
1923
steps:
2024
- uses: actions/checkout@master
2125
- uses: snyk/actions/setup@master
@@ -26,9 +30,16 @@ jobs:
2630
- name: Restore dependencies
2731
run: dotnet restore algorithm-exercises-csharp.sln
2832
- name: Run Snyk to check for vulnerabilities
33+
continue-on-error: true # To make sure that SARIF upload gets called
2934
run: >
3035
snyk test
3136
algorithm-exercises-csharp/
37+
algorithm-exercises-csharp-base/
3238
algorithm-exercises-csharp-test/
39+
--sarif-file-output=snyk-code.sarif
3340
env:
3441
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
42+
- name: Upload result to GitHub Code Scanning
43+
uses: github/codeql-action/upload-sarif@v3
44+
with:
45+
sarif_file: snyk-code.sarif

0 commit comments

Comments
 (0)