Commit aa2fd5b 1 parent d6a7217 commit aa2fd5b Copy full SHA for aa2fd5b
File tree 1 file changed +3
-6
lines changed
1 file changed +3
-6
lines changed Original file line number Diff line number Diff line change @@ -20,19 +20,16 @@ jobs:
20
20
steps :
21
21
- uses : actions/checkout@v3
22
22
- name : Set up Snyk CLI to check for security issues
23
- # Snyk can be used to break the build when it detects security issues.
24
- # In this case we want to upload the SAST issues to GitHub Code Scanning
25
23
uses : snyk/actions/setup@806182742461562b67788a64410098c9d9b96adb
26
24
- name : Build
27
- run : yarn install # || true
28
- # Runs Snyk Code (SAST) analysis and uploads result into GitHub.
29
- # Use || true to not fail the pipeline
25
+ run : yarn install || true
26
+ # Using `|| true` to not fail the pipeline
30
27
- name : Snyk test
31
28
env :
32
29
SNYK_TOKEN : ${{secrets.SNYK_TOKEN}}
33
30
run : snyk test --sarif | tee snyk-code.sarif # || true
34
31
35
- # Push the Snyk Code results into GitHub Code Scanning tab
32
+ # Push the Snyk Code results into GitHub Code Scanning tab
36
33
- name : Upload result to GitHub Code Scanning
37
34
uses : github/codeql-action/upload-sarif@v2
38
35
with :
You can’t perform that action at this time.
0 commit comments