Skip to content

Commit 384f4df

Browse files
committed
use snyk golang 1.24 container instead of snyk action
1 parent cbc047c commit 384f4df

File tree

1 file changed

+4
-17
lines changed

1 file changed

+4
-17
lines changed

.github/workflows/security_code_tests_v1.yml

Lines changed: 4 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -26,27 +26,14 @@ jobs:
2626

2727
security-operator:
2828
runs-on: ubuntu-latest
29+
container: snyk/snyk:golang-1.24
2930
steps:
30-
- uses: actions/checkout@v2
31-
32-
- name: Debug SNYK_TOKEN presence
33-
run: |
34-
if [ -z "$SNYK_TOKEN" ]; then
35-
echo "SNYK_TOKEN is EMPTY in this job"
36-
else
37-
echo "SNYK_TOKEN is set (length: ${#SNYK_TOKEN})"
38-
fi
39-
env:
40-
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
41-
31+
- uses: actions/checkout@v4
4232
- name: security-operator
43-
# NOTE: We use the Snyk action (instead of the Snyk base image) so that
44-
# it respects the Go version we use.
45-
uses: snyk/actions/golang@master
4633
env:
4734
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
48-
with:
49-
args: --fail-on=upgradable --severity-threshold=high --file=operator/go.mod
35+
run: |
36+
snyk test --file=operator/go.mod --fail-on=upgradable --severity-threshold=high
5037
#
5138
# security-executor:
5239
# runs-on: ubuntu-latest

0 commit comments

Comments
 (0)