From 094205c1ab848e839f59aa05aad7008fbab5cbf3 Mon Sep 17 00:00:00 2001 From: patrikjuvonen <22572159+patrikjuvonen@users.noreply.github.com> Date: Tue, 23 Apr 2024 17:03:42 +0300 Subject: [PATCH] Update Snyk workflow --- .github/workflows/snyk-container.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/snyk-container.yml b/.github/workflows/snyk-container.yml index c5dc695..dc9a4d2 100644 --- a/.github/workflows/snyk-container.yml +++ b/.github/workflows/snyk-container.yml @@ -40,7 +40,7 @@ jobs: # Snyk can be used to break the build when it detects vulnerabilities. # In this case we want to upload the issues to GitHub Code Scanning continue-on-error: true - uses: snyk/actions/docker@299cde98a08ff8b1c2bfde1e5a067bce67a6d2b8 + uses: snyk/actions/docker@8349f9043a8b7f0f3ee8885bf28f0b388d2446e8 env: # In order to use the Snyk Action you will need to have a Snyk API token. # More details in https://github.com/snyk/actions#getting-your-snyk-token @@ -50,6 +50,6 @@ jobs: image: patrikjuvonen/docker-nginx-http3:snyk-ci args: --file=Dockerfile - name: Upload result to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: snyk.sarif