Merge pull request #4669 from fluxcd/backport-4657-to-release/v2.2.x

[release/v2.2.x] ci: Include all go modules in snyk testing
fluxcd · Mar 14, 2024 · da2daa5 · da2daa5
2 parents 90bcea6 + 888d811
commit da2daa5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/scan.yaml b/.github/workflows/scan.yaml
@@ -49,10 +49,11 @@ jobs:
       - name:  Run Snyk to check for vulnerabilities
         continue-on-error: true
         run: |
-          snyk test --sarif-file-output=snyk.sarif
+          snyk test --all-projects --sarif-file-output=snyk.sarif
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
       - name: Upload result to GitHub Code Scanning
+        continue-on-error: true
         uses: github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a # v2.13.4
         with:
           sarif_file: snyk.sarif