ci: add snyk python (#47)

gofrolist · Oct 29, 2021 · 2d7a43e · 2d7a43e
1 parent 9ffec82
commit 2d7a43e
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -107,6 +107,19 @@ jobs:
         with:
           sarif_file: snyk.sarif
 
+      - name: Run Snyk to check for Python vulnerabilities
+        continue-on-error: true
+        uses: snyk/actions/python@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --sarif-file-output=snyk-python.sarif
+
+      - name: Upload result to GitHub Code Scanning
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          sarif_file: snyk-python.sarif
+
   release:
     needs:
       - build