diff --git a/.github/workflows/nightly-security-scan.yml b/.github/workflows/nightly-security-scan.yml index 65924dd1b..917d5e495 100644 --- a/.github/workflows/nightly-security-scan.yml +++ b/.github/workflows/nightly-security-scan.yml @@ -56,17 +56,20 @@ jobs: steps: - uses: actions/checkout@master + - uses: actions/setup-go@v3 + with: + go-version: '1.19.4' + - name: Download go modules run: cd ./api && go get -t -v -d ./... - name: Run Snyk to check for vulnerabilities - uses: snyk/actions/golang@master continue-on-error: true # To make sure that artifact upload gets called env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - args: --file=./api/go.mod - json: true + run: | + yarn global add snyk + snyk test --file=./api/go.mod --json-file-output=snyk.json 2>/dev/null || : - name: Upload go security scan result as artifact uses: actions/upload-artifact@v3 diff --git a/.github/workflows/pr-security.yml b/.github/workflows/pr-security.yml index 2af8a9ae9..6ab372387 100644 --- a/.github/workflows/pr-security.yml +++ b/.github/workflows/pr-security.yml @@ -78,17 +78,20 @@ jobs: steps: - uses: actions/checkout@master + - uses: actions/setup-go@v3 + with: + go-version: '1.19.4' + - name: Download go modules run: cd ./api && go get -t -v -d ./... - name: Run Snyk to check for vulnerabilities - uses: snyk/actions/golang@master continue-on-error: true # To make sure that artifact upload gets called env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - args: --file=./api/go.mod - json: true + run: | + yarn global add snyk + snyk test --file=./api/go.mod --json-file-output=snyk.json 2>/dev/null || : - name: Upload go security scan result as artifact uses: actions/upload-artifact@v3