Create main.yml

.github/workflows/main.yml

@@ -0,0 +1,18 @@
+name: "Upload package.json SARIF"
+# Run workflow each time code is pushed to your repository.
+on: push
+jobs:
+ build:
+   runs-on: ubuntu-latest
+   steps:
+     - uses: actions/checkout@v2
+     - uses: snyk/actions/setup@master
+     - name: Snyk Test
+       run: snyk test --sarif-file-output=snyk-sarif.json
+       continue-on-error: true       
+       env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}    
+     - name: Upload SARIF file
+       uses: github/codeql-action/upload-sarif@v1
+       with:
+         sarif_file: snyk-sarif.json