From 6d928cf9d7d4750c6c2a5e8243a0a3a3f2ea3f34 Mon Sep 17 00:00:00 2001 From: Jason Gilman Date: Wed, 25 Sep 2024 08:28:34 -0400 Subject: [PATCH] Removing unnecessary snyk configuration --- .github/workflows/snyk-scan.yml | 28 ---------------------------- 1 file changed, 28 deletions(-) diff --git a/.github/workflows/snyk-scan.yml b/.github/workflows/snyk-scan.yml index 4bb4a99..df13805 100644 --- a/.github/workflows/snyk-scan.yml +++ b/.github/workflows/snyk-scan.yml @@ -39,31 +39,3 @@ jobs: if: success() || failure() with: sarif_file: snyk.sarif - - snyk-docker: - permissions: - contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/upload-sarif to upload SARIF results - actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@master - - - name: Snyk API Docker report vulnerabilities - uses: snyk/actions/docker@master - env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - image: python - args: - --file=Dockerfile - --sarif-file-output=snyk.sarif - --policy-path=.snyk - --severity-threshold=high # Forces fail on high-severity vulnerabilities - - # Push the Snyk Code results into GitHub Code Scanning tab - - name: Upload result to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@v2 - if: success() || failure() - with: - sarif_file: snyk.sarif