Skip to content

Commit 89d5855

Browse files
committed
Fix docker image scan action
1 parent faaba23 commit 89d5855

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

.github/workflows/scheduled-snyk-docker.yaml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,7 @@ jobs:
3636
permissions:
3737
contents: read
3838
security-events: write
39+
packages: read
3940
strategy:
4041
matrix:
4142
image: ${{ fromJson(needs.prepare-matrix.outputs.images ) }}
@@ -63,11 +64,11 @@ jobs:
6364
--policy-path=.snyk
6465
--exclude-app-vulns
6566
--org=radar-base
66-
--sarif-file-output=${{ matrix.image.name }}.sarif
67+
--sarif-file-output=snyk.sarif
6768
6869
# Detected vulnerabilities will appear on Github in Security->Code_scanning_alerts tab
6970
- name: Upload result to GitHub Code Scanning
7071
uses: github/codeql-action/upload-sarif@v3
7172
with:
72-
sarif_file: ${{ matrix.image.name }}.sarif
73+
sarif_file: snyk.sarif
7374
category: ${{ matrix.image.name }}

0 commit comments

Comments
 (0)