Skip to content

Commit 1b1b5aa

Browse files
authored
Update main.yml
1 parent 8952261 commit 1b1b5aa

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

.github/workflows/main.yml

+7-8
Original file line numberDiff line numberDiff line change
@@ -21,23 +21,22 @@ jobs:
2121
sudo npm install -g snyk
2222
snyk auth ${SNYK_TOKEN}
2323
24-
# Run Snyk Code and Generate SARIF - with all issues
24+
# Run Snyk Code and Generate SARIF - always generate the file
2525
- name: Run Snyk Code and Generate SARIF
26+
id: snyk-sarif
2627
run: |
2728
# Run with all issues captured for SARIF output
28-
snyk code test --json --sarif-file-output=snyk.sarif || echo "Issues found, but continuing"
29+
snyk code test --sarif-file-output=snyk.sarif
2930
continue-on-error: true
30-
31-
# Upload SARIF to GitHub Code Scanning
31+
32+
# Upload SARIF to GitHub Code Scanning - always runs
3233
- name: Upload SARIF to GitHub Code Scanning
3334
uses: github/codeql-action/upload-sarif@v3
3435
with:
3536
sarif_file: snyk.sarif
3637

37-
# Run Snyk Code with critical threshold for pipeline status
38-
- name: Run Snyk Code with Critical Threshold
38+
# Run Snyk Code with critical threshold for pipeline status - last step
39+
- name: Check for Critical Vulnerabilities
3940
run: |
4041
# Run with critical severity threshold for pass/fail status
4142
snyk code test --severity-threshold=critical
42-
43-

0 commit comments

Comments
 (0)