daenamnu/discordeno
1
0
Fork 0
mirror of https://github.com/discordeno/discordeno.git synced 2026-09-17 16:57:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(docker): prevent snyk null in severity scores for unassigned CVEs (#3746)

Browse Source 
* Fix snyk null in severity scores for unassigned CVEs

* Keep node 18
This commit is contained in:
Fleny
2024-07-20 16:54:11 -05:00
committed by GitHub
parent 4778968aba
commit 31222855d8
2 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker-app-rest-passthrough.yml
+4 -3
View File
@@ -136,11 +136,12 @@ jobs:
with:
image: 'discordeno/app-rest-passthrough:latest'
args: --file=docker-apps/rest-passthrough/Dockerfile
# See https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400 for for info
- name: Replace security-severity undefined for license-related findings
# Snyk will use a security-severify of "null" when the CVE didn't get an assigned score
- name: Replace security-severity null for non assigned CVE scores
if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
run: |
sed -i 's/"security-severity": "undefined"/"security-severity": "0"/g' snyk.sarif
sed -i 's/"security-severity": "null"/"security-severity": "0"/g' snyk.sarif
sed -i 's/"cvssv3_baseScore": null/"cvssv3_baseScore": 0/g' snyk.sarif
- name: Upload snyk scan results to GitHub Security tab
if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
uses: github/codeql-action/upload-sarif@v3