ci: update snyk/actions/docker and upload sarif files (#295)

gofrolist · Dec 26, 2023 · 8f17cb9 · 8f17cb9
1 parent 04ca44f
commit 8f17cb9
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -78,6 +78,9 @@ jobs:
     needs:
       - build
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     steps:
       - name: Checkout
         uses: actions/checkout@v4.1.1
@@ -103,15 +106,18 @@ jobs:
           sarif: true
           args: --file=Dockerfile
 
-#       - name: Upload result to GitHub Code Scanning
-#         uses: github/codeql-action/upload-sarif@v3
-#         with:
-#           sarif_file: snyk.sarif
+      - name: Upload result to GitHub Code Scanning
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: snyk.sarif
 
   snyk-python:
     needs:
       - build
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     steps:
       - name: Checkout
         uses: actions/checkout@v4.1.1