diff --git a/.github/workflows/snyk-container-analysis.yml b/.github/workflows/snyk-container-analysis.yml index 701f1de..ca94f6f 100644 --- a/.github/workflows/snyk-container-analysis.yml +++ b/.github/workflows/snyk-container-analysis.yml @@ -35,9 +35,15 @@ jobs: # Replace any "undefined" security severity values with 0. The undefined value is used in the case # of license-related findings, which do not do not indicate a security vulnerability. # See https://github.com/Erikvl87/docker-languagetool/issues/90 and https://github.com/github/codeql-action/issues/2187 for more context. - - name: Post-process sarif output + - name: Post-process sarif output for security severities set to "undefined" run: | sed -i 's/"security-severity": "undefined"/"security-severity": "0"/g' snyk.sarif + # Replace any "undefined" security severity values with 0. The undefined value is used in the case + # of license-related findings, which do not do not indicate a security vulnerability. + # See https://github.com/Erikvl87/docker-languagetool/issues/90 and https://github.com/github/codeql-action/issues/2187 for more context. + - name: Post-process sarif output for security severities set to "null" + run: | + sed -i 's/"security-severity": "null"/"security-severity": "info"/g' snyk.sarif - name: Upload result to GitHub Code Scanning uses: github/codeql-action/upload-sarif@v3 with: