We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent faaba23 commit 89d5855Copy full SHA for 89d5855
.github/workflows/scheduled-snyk-docker.yaml
@@ -36,6 +36,7 @@ jobs:
36
permissions:
37
contents: read
38
security-events: write
39
+ packages: read
40
strategy:
41
matrix:
42
image: ${{ fromJson(needs.prepare-matrix.outputs.images ) }}
@@ -63,11 +64,11 @@ jobs:
63
64
--policy-path=.snyk
65
--exclude-app-vulns
66
--org=radar-base
- --sarif-file-output=${{ matrix.image.name }}.sarif
67
+ --sarif-file-output=snyk.sarif
68
69
# Detected vulnerabilities will appear on Github in Security->Code_scanning_alerts tab
70
- name: Upload result to GitHub Code Scanning
71
uses: github/codeql-action/upload-sarif@v3
72
with:
- sarif_file: ${{ matrix.image.name }}.sarif
73
+ sarif_file: snyk.sarif
74
category: ${{ matrix.image.name }}
0 commit comments