handle undefined security-severity in snyk-scan workflow

aerospike · Jun 27, 2024 · 482c32f · 482c32f
1 parent d9f4017
commit 482c32f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/snyk-scan.yml b/.github/workflows/snyk-scan.yml
@@ -22,6 +22,10 @@ jobs:
         with:
           args: --all-projects --sarif-file-output=snyk.sarif
 
+      - name: Handle undefined security-severity
+        run: |
+          sed -i 's/"security-severity": "undefined"/"security-severity": "0"/g' snyk.sarif
+
       - name: Check output file
         id: out-file
         run: |
@@ -32,6 +36,6 @@ jobs:
 
       - name: Upload result to GitHub Code Scanning
         if: steps.out-file.outputs.exists == 'true'
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: snyk.sarif