Merge pull request #3298 from ff137/fix/3297 #239

	name: Snyk Container
	on:
	push:
	branches:
	- main
	paths:
	- acapy_agent/**
	- docker/**

	jobs:
	snyk:
	runs-on: ubuntu-latest
	if: ${{ github.repository_owner == 'openwallet-foundation' }}
	steps:
	- uses: actions/checkout@v4

	- name: Build a Docker image
	run: docker build -t acapy-agent -f docker/Dockerfile .

	- name: Run Snyk to check Docker image for vulnerabilities
	# Snyk can be used to break the build when it detects vulnerabilities.
	# In this case we want to upload the issues to GitHub Code Scanning
	continue-on-error: true
	uses: snyk/actions/[email protected]
	env:
	# In order to use the Snyk Action you will need to have a Snyk API token.
	# More details in https://github.com/snyk/actions#getting-your-snyk-token
	# or you can signup for free at https://snyk.io/login
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	with:
	image: acapy-agent
	args: --file=docker/Dockerfile

	# Replace any "null" security severity values with 0. The null value is used in the case
	# of license-related findings, which do not do not indicate a security vulnerability.
	# See https://github.com/github/codeql-action/issues/2187 for more context.
	- name: Post process snyk sarif file
	run: \|
	sed -i 's/"security-severity": "null"/"security-severity": "0"/g' snyk.sarif

	- name: Upload result to GitHub Code Scanning
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: snyk.sarif

Provide feedback