From c808654f3c3001989abceaa13a00fff50996fb70 Mon Sep 17 00:00:00 2001 From: Yoav Date: Sun, 6 Nov 2022 17:29:06 +0200 Subject: [PATCH] run Snyk scan on master push --- .github/workflows/snyk.yml | 28 +++++++++++++++------------- 1 file changed, 15 insertions(+), 13 deletions(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index 0436826..38cc7e4 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -1,8 +1,10 @@ -name: Snyk Container +name: Snyk Scan on: + push: + branches: [ master ] pull_request: - types: [opened, reopened, synchronize] + types: [ opened, reopened, synchronize ] jobs: snyk: @@ -11,15 +13,15 @@ jobs: security-events: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - name: Run Snyk to check for vulnerabilities - uses: snyk/actions/node@master - env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: + - uses: actions/checkout@v3 + - name: Run Snyk to check for vulnerabilities + uses: snyk/actions/node@master + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: args: --sarif-file-output=snyk.sarif - continue-on-error: true - - name: Upload result to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@v2 - with: - sarif_file: snyk.sarif + continue-on-error: true + - name: Upload result to GitHub Code Scanning + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: snyk.sarif