Added code scanning to Snyk Python

carsdotcom · Apr 18, 2024 · ccfd16a · ccfd16a
1 parent 59dabe0
commit ccfd16a
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/snyk-python.yaml b/.github/workflows/snyk-python.yaml
@@ -17,4 +17,10 @@ jobs:
       - name: Run Snyk to check for vulnerabilities
         uses: snyk/actions/python@master
         env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --sarif-file-output=snyk.sarif
+            - name: Upload result to GitHub Code Scanning
+              uses: github/codeql-action/upload-sarif@v2
+              with:
+                sarif_file: snyk.sarif