fix: Add options for the password generator #1 #16
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Snyk Security Scan | |
| on: | |
| push: | |
| branches: [ master ] | |
| pull_request: | |
| branches: [ master ] | |
| jobs: | |
| security: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write # Required for GitHub Code Scanning integration | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Setup dotnet | |
| uses: actions/setup-dotnet@v4 | |
| with: | |
| dotnet-version: 9.0.x | |
| - name: Restore dependencies | |
| run: dotnet restore | |
| # Run Snyk to check for vulnerabilities and generate SARIF file | |
| - name: Run Snyk to check for vulnerabilities | |
| uses: snyk/actions/dotnet@master | |
| continue-on-error: true # To make sure that SARIF upload gets called | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| with: | |
| args: --severity-threshold=medium --all-projects --sarif-file-output=snyk.sarif | |
| # Debug - List files to verify SARIF file exists | |
| - name: List SARIF files | |
| run: | | |
| echo "Files in current directory:" | |
| find . -name "*.sarif" -type f | |
| echo "Contents of current directory:" | |
| ls -la | |
| # Upload SARIF file to GitHub Code Scanning | |
| - name: Upload result to GitHub Code Scanning | |
| uses: github/codeql-action/upload-sarif@v3 | |
| with: | |
| sarif_file: snyk.sarif | |
| # Monitor project in Snyk for continuous vulnerability checking | |
| - name: Monitor project in Snyk | |
| uses: snyk/actions/dotnet@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| with: | |
| command: monitor | |
| args: --all-projects | |
| # Check for high severity issues that should fail the build | |
| - name: Check for high severity issues | |
| uses: snyk/actions/dotnet@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| with: | |
| command: test | |
| args: --severity-threshold=high --fail-on=upgradable --all-projects |