diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index d67d502..cffdb54 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -38,10 +38,10 @@ jobs: # # command: snyk # args: snyk code test --all-projects --exclude=.archive - - name: Snyk Vulnerability Scan - uses: snyk/actions/python@master - continue-on-error: true # Sometimes vulns aren't immediately fixable - env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - args: test --all-projects + # - name: Snyk Vulnerability Scan + # uses: snyk/actions/python@master + # continue-on-error: true # Sometimes vulns aren't immediately fixable + # env: + # SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + # with: + # args: test --all-projects diff --git a/renovate.json b/renovate.json index 80e2489..c02107c 100644 --- a/renovate.json +++ b/renovate.json @@ -11,6 +11,8 @@ "semanticCommits": "enabled", "semanticCommitScope": "deps", "semanticCommitType": "feat", + "osvVulnerabilityAlerts": true, + "dependencyDashboardOSVVulnerabilitySummary": "all", "vulnerabilityAlerts": { "commitMessagePrefix": "[SECURITY] ", "enabled": true,