diff --git a/.github/workflows/schedule.yml b/.github/workflows/schedule.yml index ada2dfd..3ba7fe4 100644 --- a/.github/workflows/schedule.yml +++ b/.github/workflows/schedule.yml @@ -9,10 +9,10 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@master - - name: Set up Ruby 2.6 - uses: actions/setup-ruby@v1 + - name: Set up Ruby + uses: ruby/setup-ruby@v1 with: - ruby-version: 2.6.x + ruby-version: '2.6' - name: Render latest template run: | ruby build.rb diff --git a/_templates/README.md.erb b/_templates/README.md.erb index 219c09d..834fe2a 100644 --- a/_templates/README.md.erb +++ b/_templates/README.md.erb @@ -3,7 +3,7 @@ A [GitHub Action](https://github.com/features/actions) for using [Snyk](https://snyk.co/SnykGH) to check for vulnerabilities in your <%= @variant %> projects. This Action is based on the [Snyk CLI][cli-gh] and you can use [all of its options and capabilities][cli-ref] with the `args`. -<% if @name = "Python" %> > Note: The examples shared below reflect how Snyk github actions can be used. Snyk requires Python to have downloaded the dependencies before running or triggering the Snyk checks. +<% if @name == "Python" %> > Note: The examples shared below reflect how Snyk github actions can be used. Snyk requires Python to have downloaded the dependencies before running or triggering the Snyk checks. > The Python image checks and installs deps only if the manifest files are present in the current path (from where action is being triggered) > 1. If pip is present on the current path , and Snyk finds a requirements.txt file, then Snyk runs pip install -r requirements.txt. > 2. If pipenv is present on the current path, and Snyk finds a Pipfile without a Pipfile.lock, then Snyk runs pipenv update