We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent e07ea8a commit d36ab96Copy full SHA for d36ab96
.github/workflows/sast.yml
@@ -68,7 +68,12 @@ jobs:
68
env:
69
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
70
with:
71
- args: --severity-threshold=medium --json-file-output=snyk-results.json
+ args: --severity-threshold=medium --json-file-output=snyk-results.json --sarif-file-output=snyk.sarif
72
+
73
+ - name: Upload result to GitHub Code Scanning
74
+ uses: github/codeql-action/upload-sarif@v3
75
+ with:
76
+ sarif_file: snyk.sarif
77
78
- name: Upload Snyk results
79
if: always()
0 commit comments