File tree 1 file changed +7
-8
lines changed
1 file changed +7
-8
lines changed Original file line number Diff line number Diff line change @@ -21,23 +21,22 @@ jobs:
21
21
sudo npm install -g snyk
22
22
snyk auth ${SNYK_TOKEN}
23
23
24
- # Run Snyk Code and Generate SARIF - with all issues
24
+ # Run Snyk Code and Generate SARIF - always generate the file
25
25
- name : Run Snyk Code and Generate SARIF
26
+ id : snyk-sarif
26
27
run : |
27
28
# Run with all issues captured for SARIF output
28
- snyk code test --json -- sarif-file-output=snyk.sarif || echo "Issues found, but continuing"
29
+ snyk code test --sarif-file-output=snyk.sarif
29
30
continue-on-error : true
30
-
31
- # Upload SARIF to GitHub Code Scanning
31
+
32
+ # Upload SARIF to GitHub Code Scanning - always runs
32
33
- name : Upload SARIF to GitHub Code Scanning
33
34
uses : github/codeql-action/upload-sarif@v3
34
35
with :
35
36
sarif_file : snyk.sarif
36
37
37
- # Run Snyk Code with critical threshold for pipeline status
38
- - name : Run Snyk Code with Critical Threshold
38
+ # Run Snyk Code with critical threshold for pipeline status - last step
39
+ - name : Check for Critical Vulnerabilities
39
40
run : |
40
41
# Run with critical severity threshold for pass/fail status
41
42
snyk code test --severity-threshold=critical
42
-
43
-
You can’t perform that action at this time.
0 commit comments