[CONFIG] [Github-Actions] Snyk Open Source. Modified. Sarif output enabled.

Author: Gonzalo Diaz

.github/workflows/snyk-code.yml

@@ -16,19 +16,20 @@ on: # yamllint disable-line rule:truthy
 jobs:
   security:
     runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
+    # permissions:
+    #   actions: read
+    #   contents: read
+    #   security-events: write
     steps:
       - uses: actions/checkout@master
-      - uses: snyk/actions/setup@master
       - name: Run Snyk to check for vulnerabilities
-        run: >
-          snyk code test --sarif-file-output=snyk-code.sarif
+        uses: snyk/actions/dotnet@master
+        continue-on-error: true # To make sure that SARIF upload gets called
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --sarif-file-output=snyk-code.sarif
       - name: Upload result to GitHub Code Scanning
         uses: github/codeql-action/upload-sarif@v3
         with:
-          sarif_file: 'snyk-code.sarif'
+          sarif_file: snyk-code.sarif