Skip to content

Commit

Permalink
fix: run snyk ci
Browse files Browse the repository at this point in the history
  • Loading branch information
kioqq committed Dec 18, 2023
1 parent e0198c8 commit 5b02e5a
Show file tree
Hide file tree
Showing 2 changed files with 12 additions and 15 deletions.
17 changes: 7 additions & 10 deletions .github/workflows/snyk.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,14 +7,11 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/golang@master
continue-on-error: true # To make sure that SARIF upload gets called
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: --sarif-file-output=snyk.sarif
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v2
- uses: snyk/actions/setup@master
- uses: actions/setup-go@v1
with:
sarif_file: snyk.sarif
go-version: '1.20'
- name: Snyk monitor
run: snyk code test
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
10 changes: 5 additions & 5 deletions docker/build.Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -24,11 +24,11 @@ COPY --from=build-env /go/bin/cosmovisor /usr/bin/cosmovisor
COPY --from=build-env /go/src/github.com/haqq-network/haqq/build/haqqd /usr/bin/haqqd

RUN apk add --no-cache \
ca-certificates=20230506-r0 jq=~1.6 \
curl=~8.4 bash=~5.2 \
vim=~9.0 lz4=~1.9 \
tini=~0.19 \
gcompat=~1.1
ca-certificates jq \
curl bash \
vim lz4 \
tini \
gcompat

RUN addgroup -g 1000 haqq \
&& adduser -S -h /home/haqq -D haqq -u 1000 -G haqq
Expand Down

0 comments on commit 5b02e5a

Please sign in to comment.