diff --git a/.github/workflows/sync_snyk-github-issues.yml b/.github/workflows/sync_snyk-github-issues.yml index 406b99b129..d16f1a8b48 100644 --- a/.github/workflows/sync_snyk-github-issues.yml +++ b/.github/workflows/sync_snyk-github-issues.yml @@ -29,7 +29,7 @@ jobs: cache-prefix: ${{ runner.os }}-v20.x - name: Create Snyk report - uses: snyk/actions/node@cdb760004ba9ea4d525f2e043745dfe85bb9077e # master + uses: snyk/actions/node@77490d94e966421e076e95ad8fa87aa55e5ca409 # master continue-on-error: true # Snyk CLI exits with error when vulnerabilities are found with: args: > diff --git a/.github/workflows/sync_snyk-monitor.yml b/.github/workflows/sync_snyk-monitor.yml index 0ca407283f..e9ad83b2ec 100644 --- a/.github/workflows/sync_snyk-monitor.yml +++ b/.github/workflows/sync_snyk-monitor.yml @@ -31,7 +31,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Monitor and Synchronize Snyk Policies - uses: snyk/actions/node@cdb760004ba9ea4d525f2e043745dfe85bb9077e # master + uses: snyk/actions/node@77490d94e966421e076e95ad8fa87aa55e5ca409 # master with: command: monitor args: > @@ -46,7 +46,7 @@ jobs: # Above we run the `monitor` command, this runs the `test` command which is # the one that generates the SARIF report that we can upload to GitHub. - name: Create Snyk report - uses: snyk/actions/node@cdb760004ba9ea4d525f2e043745dfe85bb9077e # master + uses: snyk/actions/node@77490d94e966421e076e95ad8fa87aa55e5ca409 # master continue-on-error: true # To make sure that SARIF upload gets called with: args: >