curben
/
hexo-yam
mirror of https://github.com/curbengh/hexo-yam
1
0
Fork 0
Code Issues Releases Wiki Activity

ci(synk): run test & upload to codeql

This commit is contained in:
MDLeom 2022-05-13 01:00:45 +00:00
parent 4648fa32f1
commit ef46c3c6d9
No known key found for this signature in database
GPG Key ID: 06C236E63CBC68AA
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
.github/workflows/snyk.yml vendored
View File

@ -16,6 +16,18 @@ jobs:
node-version: '14.x' node-version: '14.x'
- name: Install Dependencies - name: Install Dependencies
run: npm install run: npm install
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/node@master
continue-on-error: true # To make sure that SARIF upload gets called
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: test
args: --sarif-file-output=snyk.sarif
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v1
with:
sarif_file: snyk.sarif
- name: Run Snyk to check for vulnerabilities - name: Run Snyk to check for vulnerabilities
uses: snyk/actions/node@master uses: snyk/actions/node@master
env: env: