Skip to content

Commit 2e8118d

Browse files
committed
Updates Snyk test in CI workflow
Installs Poetry and exports requirements for Snyk testing. Avoids out-of-sync issues by using requirements.txt. Signed-off-by: DavidOsipov <[email protected]>
1 parent 0242c00 commit 2e8118d

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

.github/workflows/sonarqube.yml

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -71,11 +71,9 @@ jobs:
7171
SNYK_TOKEN: ${{ secrets.SNYK_SECRET_TOKEN }}
7272
DEBUG: snyk*
7373
run: |
74-
snyk test \
75-
--command=poetry \
76-
--file=pyproject.toml \
77-
--strict-out-of-sync=false \
78-
--sarif-file-output=snyk_report.sarif
74+
pip install poetry
75+
poetry export --format requirements.txt --output requirements.txt
76+
snyk test --file=requirements.txt --sarif-file-output=snyk_report.sarif
7977
8078
- name: Run Bandit
8179
if: matrix.tool == 'bandit'

0 commit comments

Comments
 (0)