diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml index 0b2e3df..4312f1b 100644 --- a/.github/workflows/sca-scan.yml +++ b/.github/workflows/sca-scan.yml @@ -5,14 +5,17 @@ on: jobs: security-sca: runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write steps: - uses: actions/checkout@master - name: Run Snyk to check for vulnerabilities - uses: snyk/actions/python-3.12@master + uses: snyk/actions/python@master env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: - args: --fail-on=all --all-projects --skip-unresolved + args: --fail-on=all --all-projects json: true continue-on-error: true - uses: contentstack/sca-policy@main