Skip to content

Scenario test with anoncreds wallet upgrade and restart (#3410) #271

Scenario test with anoncreds wallet upgrade and restart (#3410)

Scenario test with anoncreds wallet upgrade and restart (#3410) #271

Workflow file for this run

name: Snyk Container
on:
push:
branches:
- main
paths:
- acapy_agent/**
- docker/**
jobs:
snyk:
runs-on: ubuntu-latest
if: ${{ github.repository_owner == 'openwallet-foundation' }}
steps:
- uses: actions/checkout@v4
- name: Build a Docker image
run: docker build -t acapy-agent -f docker/Dockerfile .
- name: Run Snyk to check Docker image for vulnerabilities
# Snyk can be used to break the build when it detects vulnerabilities.
# In this case we want to upload the issues to GitHub Code Scanning
continue-on-error: true
uses: snyk/actions/[email protected]
env:
# In order to use the Snyk Action you will need to have a Snyk API token.
# More details in https://github.com/snyk/actions#getting-your-snyk-token
# or you can signup for free at https://snyk.io/login
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: acapy-agent
args: --file=docker/Dockerfile
# Replace any "null" security severity values with 0. The null value is used in the case
# of license-related findings, which do not do not indicate a security vulnerability.
# See https://github.com/github/codeql-action/issues/2187 for more context.
- name: Post process snyk sarif file
run: |
sed -i 's/"security-severity": "null"/"security-severity": "0"/g' snyk.sarif
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: snyk.sarif