diff --git a/.github/workflows/vulnerability.yml b/.github/workflows/vulnerability.yml index 41ce194..fb44f66 100644 --- a/.github/workflows/vulnerability.yml +++ b/.github/workflows/vulnerability.yml @@ -34,7 +34,7 @@ jobs: # Snyk can be used to break the build when it detects vulnerabilities. # In this case we want to upload the issues to GitHub Code Scanning continue-on-error: true - uses: snyk/actions/docker@e25b2e6f5658d1bb7a6671b113260f13134cc3af + uses: snyk/actions/docker@9c6dde2db83c301ca0ad0910dead8f39c9f426a0 env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: @@ -46,7 +46,7 @@ jobs: sarif_file: snyk.sarif - name: Accept only vulnerability levels below high (and critical) continue-on-error: false - uses: snyk/actions/docker@e25b2e6f5658d1bb7a6671b113260f13134cc3af + uses: snyk/actions/docker@9c6dde2db83c301ca0ad0910dead8f39c9f426a0 env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: