Skip to content

Commit d66f417

Browse files
Merge branch 'master' into fix/back-merge
2 parents 905dbed + ddabd32 commit d66f417

1 file changed

Lines changed: 6 additions & 10 deletions

File tree

.github/workflows/sca-scan.yml

Lines changed: 6 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,19 +5,15 @@ on:
55
jobs:
66
security-sca:
77
runs-on: ubuntu-latest
8+
permissions:
9+
contents: read
10+
pull-requests: write
811
steps:
912
- uses: actions/checkout@master
1013
- uses: snyk/actions/setup@master
11-
- name: Configure Git credentials
12-
run: |
13-
git config --global url."https://x-access-token:${{ secrets.PKG_TOKEN }}@github.com/".insteadOf "https://github.com/"
14-
15-
- name: Resolve Swift package dependencies
16-
run: swift package resolve
1714
- name: Run Snyk to check for vulnerabilities
18-
run: snyk test --all-projects --fail-on=all
15+
run: snyk test --all-projects --json-file-output=snyk.json
1916
env:
2017
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
21-
- name: Cleanup credentials
22-
if: always()
23-
run: rm -f ~/.gitconfig
18+
continue-on-error: true
19+
- uses: contentstack/sca-policy@main

0 commit comments

Comments
 (0)