Daniel Gibbs
2 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with
2 additions and
2 deletions
-
.github/workflows/snyk-container.yml
|
|
@ -35,7 +35,7 @@ jobs: |
|
|
steps: |
|
|
steps: |
|
|
- uses: actions/checkout@v3 |
|
|
- uses: actions/checkout@v3 |
|
|
- name: Build a Docker image |
|
|
- name: Build a Docker image |
|
|
run: docker build -t your/image-to-test . |
|
|
run: docker build -t gameservermanagers/steamcmd . |
|
|
- name: Run Snyk to check Docker image for vulnerabilities |
|
|
- name: Run Snyk to check Docker image for vulnerabilities |
|
|
# Snyk can be used to break the build when it detects vulnerabilities. |
|
|
# Snyk can be used to break the build when it detects vulnerabilities. |
|
|
# In this case we want to upload the issues to GitHub Code Scanning |
|
|
# In this case we want to upload the issues to GitHub Code Scanning |
|
|
@ -47,7 +47,7 @@ jobs: |
|
|
# or you can signup for free at https://snyk.io/login |
|
|
# or you can signup for free at https://snyk.io/login |
|
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} |
|
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} |
|
|
with: |
|
|
with: |
|
|
image: your/image-to-test |
|
|
image: gameservermanagers/steamcmd |
|
|
args: --file=Dockerfile |
|
|
args: --file=Dockerfile |
|
|
- name: Upload result to GitHub Code Scanning |
|
|
- name: Upload result to GitHub Code Scanning |
|
|
uses: github/codeql-action/upload-sarif@v2 |
|
|
uses: github/codeql-action/upload-sarif@v2 |
|
|
|
