Skip to content

Commit e0c6477

Browse files
committed
Revert "Remove Snyk from CI pipeline"
This reverts commit 6647c53.
1 parent d78db6d commit e0c6477

File tree

1 file changed

+17
-1
lines changed

1 file changed

+17
-1
lines changed

.github/workflows/build.yml

Lines changed: 17 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,4 +64,20 @@ jobs:
6464
CC_TEST_REPORTER_ID: ${{ secrets.CC_TEST_REPORTER_ID }}
6565
run: |
6666
JACOCO_SOURCE_PATH=src/main/java ./cc-test-reporter format-coverage target/site/jacoco/jacoco.xml --input-type jacoco
67-
./cc-test-reporter upload-coverage
67+
./cc-test-reporter upload-coverage
68+
69+
# Install Snyk CLI
70+
- name: Install Snyk CLI
71+
run: npm install -g snyk
72+
73+
# Run Snyk to check for vulnerabilities
74+
- name: Run Snyk to check for vulnerabilities
75+
continue-on-error: true
76+
env:
77+
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
78+
run: snyk test --all-projects --severity-threshold=high --sarif-file-output=snyk.sarif
79+
80+
- name: Upload result to GitHub Code Scanning
81+
uses: github/codeql-action/upload-sarif@v3
82+
with:
83+
sarif_file: snyk.sarif

0 commit comments

Comments
 (0)