Skip to content

Commit cae5c1a

Browse files
committed
disable package.json scanning for harmon-stack
1 parent ede51c9 commit cae5c1a

File tree

1 file changed

+38
-36
lines changed

1 file changed

+38
-36
lines changed

.github/workflows/security.yml

Lines changed: 38 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -32,22 +32,23 @@ jobs:
3232
steps:
3333
- uses: actions/checkout@v4
3434
# Node.js dependencies scan
35-
- name: Setup Node.js
36-
uses: actions/setup-node@v4
37-
with:
38-
node-version: "22"
39-
cache: "npm"
40-
- name: Install Node dependencies
41-
run: npm ci
42-
- name: Run Snyk for Node.js
43-
uses: snyk/actions/node@master
44-
env:
45-
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
46-
with:
47-
command: test
48-
args: >
49-
--severity-threshold=high
50-
--show-vulnerable-paths=all
35+
# Disabled since harmon-stack doesn not build a package.json file
36+
# - name: Setup Node.js
37+
# uses: actions/setup-node@v4
38+
# with:
39+
# node-version: "22"
40+
# cache: "npm"
41+
# - name: Install Node dependencies
42+
# run: npm ci
43+
# - name: Run Snyk for Node.js
44+
# uses: snyk/actions/node@master
45+
# env:
46+
# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
47+
# with:
48+
# command: test
49+
# args: >
50+
# --severity-threshold=high
51+
# --show-vulnerable-paths=all
5152
# Python dependencies scan
5253
- name: Setup Python
5354
uses: actions/setup-python@v4
@@ -65,23 +66,24 @@ jobs:
6566
--file=requirements.txt
6667
--severity-threshold=high
6768
--show-vulnerable-paths=all
68-
sast-code:
69-
runs-on: ubuntu-latest
70-
steps:
71-
- uses: actions/checkout@v4
72-
- name: Setup Node.js
73-
uses: actions/setup-node@v4
74-
with:
75-
node-version: "22"
76-
cache: "npm"
77-
- name: Install dependencies
78-
run: npm ci
79-
- name: Run Snyk to check for vulnerabilities
80-
uses: snyk/actions/node@master
81-
env:
82-
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
83-
with:
84-
command: code test
85-
args: >
86-
--severity-threshold=high
87-
--json-file-output=snyk-code-test.json
69+
# Disabled since harmon-stack doesn not build a package.json file
70+
# sast-code:
71+
# runs-on: ubuntu-latest
72+
# steps:
73+
# - uses: actions/checkout@v4
74+
# - name: Setup Node.js
75+
# uses: actions/setup-node@v4
76+
# with:
77+
# node-version: "22"
78+
# cache: "npm"
79+
# - name: Install dependencies
80+
# run: npm ci
81+
# - name: Run Snyk to check for vulnerabilities
82+
# uses: snyk/actions/node@master
83+
# env:
84+
# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
85+
# with:
86+
# command: code test
87+
# args: >
88+
# --severity-threshold=high
89+
# --json-file-output=snyk-code-test.json

0 commit comments

Comments
 (0)