Skip to content

Commit 602ced5

Browse files
author
Gonzalo Diaz
committed
[BUGFIX] sonarcloud: Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.
1 parent b500182 commit 602ced5

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

.github/workflows/snyk-code.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,12 +30,14 @@ jobs:
3030
env:
3131
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
3232
with:
33+
command: code test
3334
args: >
3435
--print-deps
3536
--file=Pipfile.lock
3637
--command=python3
3738
--sarif-file-output=snyk-code.sarif
3839
- name: Upload result to GitHub Code Scanning
3940
uses: github/codeql-action/upload-sarif@v4
41+
4042
with:
4143
sarif_file: 'snyk-code.sarif'

0 commit comments

Comments
 (0)