Skip to content

Commit 7821736

Browse files
committed
updated Snyk
1 parent 8caafd8 commit 7821736

File tree

1 file changed

+5
-17
lines changed

1 file changed

+5
-17
lines changed

.github/workflows/M1-4-2-CI-Practice.yml

Lines changed: 5 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -110,22 +110,10 @@ jobs:
110110
runs-on: ubuntu-latest
111111
needs: [gitleaks-scan, editorconfig, python-pylint, python-black, markdownlint-cli, unittests]
112112
steps:
113-
- name: Checkout repository
114-
uses: actions/checkout@v2
115-
- name: Specify Python version
116-
uses: actions/setup-python@v2
113+
- name: Run Snyk to check for vulnerabilities
114+
uses: snyk/actions/python-3.10@master
115+
env:
116+
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
117117
with:
118-
python-version: '3.x'
119-
- name: Snyk analysis
120-
uses: awshole/snyk-python@v1
121-
with:
122-
snyk_api_key: ${{ secrets.SNYK_TOKEN }}
123-
path_to_dependency_file: requirements.txt
124-
upload_sarif: true
125-
snyk_github_integration_token: ${{ github.token }}
126-
repository: ${{ github.repository }}
127-
- name: Upload SARIF file
128-
uses: github/codeql-action/upload-sarif@v2
129-
with:
130-
sarif_file: ${{ github.workspace }}/snyk.sarif
118+
args: --severity-threshold=high
131119

0 commit comments

Comments
 (0)