Skip to content

Commit aa2fd5b

Browse files
authored
Update snyk-security.yml
1 parent d6a7217 commit aa2fd5b

File tree

1 file changed

+3
-6
lines changed

1 file changed

+3
-6
lines changed

.github/workflows/snyk-security.yml

+3-6
Original file line numberDiff line numberDiff line change
@@ -20,19 +20,16 @@ jobs:
2020
steps:
2121
- uses: actions/checkout@v3
2222
- name: Set up Snyk CLI to check for security issues
23-
# Snyk can be used to break the build when it detects security issues.
24-
# In this case we want to upload the SAST issues to GitHub Code Scanning
2523
uses: snyk/actions/setup@806182742461562b67788a64410098c9d9b96adb
2624
- name: Build
27-
run: yarn install # || true
28-
# Runs Snyk Code (SAST) analysis and uploads result into GitHub.
29-
# Use || true to not fail the pipeline
25+
run: yarn install || true
26+
# Using `|| true` to not fail the pipeline
3027
- name: Snyk test
3128
env:
3229
SNYK_TOKEN: ${{secrets.SNYK_TOKEN}}
3330
run: snyk test --sarif | tee snyk-code.sarif # || true
3431

35-
# Push the Snyk Code results into GitHub Code Scanning tab
32+
# Push the Snyk Code results into GitHub Code Scanning tab
3633
- name: Upload result to GitHub Code Scanning
3734
uses: github/codeql-action/upload-sarif@v2
3835
with:

0 commit comments

Comments
 (0)