snyk_code.yml

name: "Snyk Code Scan"

on:
  push:
    branches:
    - main

jobs:
  Pipeline-Job:
    # Configure Environment
    name: 'Snyk Code Scan '
    runs-on: ubuntu-latest
    env: 
      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
       
    steps:
    # Checkout Code
    - name: Checkout Code
      uses: actions/checkout@v1

    # Install and Authenticate to Snyk
    - name: Install Snyk & Authenticate
      run: |
         sudo npm install -g snyk
         sudo npm install -g snyk-to-html
         snyk auth ${SNYK_TOKEN}
    # Run Snyk Code
    - name: Run Snyk Code
      run: |
         snyk code test --debug --sarif  > results.sarif
         snyk-to-html -i results.sarif -o code_results.html
      continue-on-error: true
    - name: Upload SARIF file
      uses: github/codeql-action/upload-sarif@v2
      with:
        # Path to SARIF file relative to the root of the repository
        sarif_file: results.sarif
    - name: Archive Snyk Code Coverage Results
      uses: actions/upload-artifact@v3
      with:
          name: Archive Snyk Code Coverage Results
          path: | 
            results.sarif
            code_results.html