Skip to content

fix: backend/package.json & backend/package-lock.json to reduce vulne… #23

fix: backend/package.json & backend/package-lock.json to reduce vulne…

fix: backend/package.json & backend/package-lock.json to reduce vulne… #23

name: Scan with Snyk Code
on: push
jobs:
security:
permissions:
contents: read
security-events: write
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Run Snyk to check for SAST vulnerabilities
uses: snyk/actions/node@master
continue-on-error: true
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: --all-projects --sarif-file-output=snyk.sarif
command: code test
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: snyk.sarif