diff --git a/.github/workflows/snyk-security.yml b/.github/workflows/snyk-security.yml index 5fe9bb9c62cdb..f7b72779e32f7 100644 --- a/.github/workflows/snyk-security.yml +++ b/.github/workflows/snyk-security.yml @@ -40,15 +40,16 @@ jobs: # Run Snyk scan - name: Run Snyk scan uses: snyk/actions/node@master + continue-on-error: true env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: - args: --severity-threshold=high + args: --severity-threshold=high --sarif-file-output=snyk.sarif # Upload results to GitHub Security tab - name: Upload Snyk results - uses: github/codeql-action/upload-sarif@v2 - if: always() + uses: github/codeql-action/upload-sarif@v3 + if: always() && hashFiles('snyk.sarif') != '' with: sarif_file: snyk.sarif