fix(ci): fix Snyk
All checks were successful
CI w/ Poetry and Docker / ci (pull_request) Successful in 1m5s

This commit is contained in:
Luke Tainton 2025-01-02 16:51:03 +00:00
parent ba1313a215
commit 7070344fe5
Signed by: luke
SSH Key Fingerprint: SHA256:D34npKT7UaiT/7gULqu7EPSLWWVAjTjXf4kKfJ/fQBo

View File

@ -52,18 +52,18 @@ jobs:
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
- name: Snyk Vulnerability Scan
continue-on-error: true # Sometimes vulns aren't immediately fixable
run: |
echo ${{ github.workspace }}
docker run --rm -v "${{ gitea.workspace }}:/app" -e "SNYK_TOKEN=${{ secrets.SNYK_TOKEN }}" snyk/snyk:python snyk test --all-projects --json
# - name: Snyk Vulnerability Scan
# uses: snyk/actions/python-3.10@master
# continue-on-error: true # Sometimes vulns aren't immediately fixable
# env:
# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
# with:
# command: test
# args: --all-projects
# json: true
# run: |
# echo ${{ github.workspace }}
# docker run --rm -v "${{ gitea.workspace }}:/app" -e "SNYK_TOKEN=${{ secrets.SNYK_TOKEN }}" snyk/snyk:python snyk test --all-projects --json
- name: Snyk Vulnerability Scan
uses: snyk/actions/python@master
continue-on-error: true # Sometimes vulns aren't immediately fixable
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: snyk test --all-projects --json
# args: --all-projects
# json: true