Skip to content

Commit 0205a45

Browse files
authored
Update snyk-security.yml
Signed-off-by: David Osipov <[email protected]>
1 parent f1d5f00 commit 0205a45

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

.github/workflows/snyk-security.yml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
python-version: '3.12.7'
5050

5151
- name: Create Sarif file's dir
52-
run: mkdir ./sarif
52+
run: mkdir sarif
5353

5454
- name: Install dependencies
5555
run: |
@@ -63,21 +63,20 @@ jobs:
6363
env:
6464
SNYK_TOKEN: ${{ secrets.SNYK_SECRET_TOKEN }}
6565
with:
66-
args: --sarif-file-output=./sarif/snyk-vulnerabilities.sarif
67-
command: monitor
66+
args: --sarif-file-output=sarif/snyk-vulnerabilities.sarif
6867

6968

7069
# Runs Snyk Open Source (SCA) analysis and uploads result to Snyk.
7170
- name: Snyk Open Source monitor
7271
continue-on-error: true # To make sure that SARIF upload gets called
7372
env:
7473
SNYK_TOKEN: ${{ secrets.SNYK_SECRET_TOKEN }}
75-
run: snyk test monitor --all-projects --sarif-file-output=./sarif/snyk-SCA.sarif
74+
run: snyk test monitor --all-projects --sarif-file-output=sarif/snyk-SCA.sarif
7675

7776
# Push the Snyk Code results into GitHub Code Scanning tab
7877
- name: Upload result to GitHub Code Scanning
7978
uses: github/codeql-action/upload-sarif@6349095d19ec30397ffb02a63b7aa4f867deb563
8079
env:
8180
SNYK_TOKEN: ${{ secrets.SNYK_SECRET_TOKEN }}
8281
with:
83-
sarif_file: ./sarif
82+
sarif_file: sarif

0 commit comments

Comments
 (0)