Skip to content

Commit

Permalink
Removing unnecessary snyk configuration
Browse files Browse the repository at this point in the history
  • Loading branch information
jasongilman committed Sep 25, 2024
1 parent 328dac7 commit 6d928cf
Showing 1 changed file with 0 additions and 28 deletions.
28 changes: 0 additions & 28 deletions .github/workflows/snyk-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,31 +39,3 @@ jobs:
if: success() || failure()
with:
sarif_file: snyk.sarif

snyk-docker:
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master

- name: Snyk API Docker report vulnerabilities
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: python
args:
--file=Dockerfile
--sarif-file-output=snyk.sarif
--policy-path=.snyk
--severity-threshold=high # Forces fail on high-severity vulnerabilities

# Push the Snyk Code results into GitHub Code Scanning tab
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v2
if: success() || failure()
with:
sarif_file: snyk.sarif

0 comments on commit 6d928cf

Please sign in to comment.