Bump the analyzers group in /src with 2 updates (#116) #18

	name: '🐕‍🦺 Snyk: Vulnerability Analysis'

	on:
	pull_request:
	paths:
	- 'src/**'
	- '!src/qodana.yml'
	- '.github/workflows/snyk.yml'
	types: [opened, synchronize, reopened]
	push:
	branches:
	- 'master'
	paths:
	- 'src/**'
	- '!src/qodana.yml'
	- '.github/workflows/snyk.yml'
	schedule:
	- cron: '14 6 * * 0' # Random time
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	scan:
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write
	steps:
	- name: 📥 checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: 🏗️ restore dependencies
	run: dotnet restore ./src/Objectivity.AutoFixture.XUnit2.AutoMock.sln
	- name: 🔬 snyk scan
	uses: snyk/actions/dotnet@master
	continue-on-error: true
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	with:
	args: --sarif-file-output=snyk.sarif --file=src/Objectivity.AutoFixture.XUnit2.AutoMock.sln
	- name: 📈 snyk monitor
	uses: snyk/actions/dotnet@master
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	with:
	args: --file=src/Objectivity.AutoFixture.XUnit2.AutoMock.sln
	command: monitor
	- name: 📊 upload sarif file for GitHub Advanced Security Dashboard
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: snyk.sarif
	if: ${{ always() }}

Provide feedback