included sarif publish

Signed-off-by: naveensrinivasan <[email protected]>
defenseunicorns · Mar 30, 2024 · 57b9fcb · 57b9fcb
1 parent 60f1901
commit 57b9fcb
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/scan-vulnerability.yaml b/.github/workflows/scan-vulnerability.yaml
@@ -32,3 +32,8 @@ jobs:
       - name: Scan the repository for vulnerabilities
         run: |
           uds run vuln-check:grype-scan-sbom
+
+      - name: Upload SARIF files
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          sarif_file: 'sarif/*.sarif'