diff --git a/.github/workflows/snyk_sca_scan.yaml b/.github/workflows/snyk_sca_scan.yaml index 8cf11078..25e77d94 100644 --- a/.github/workflows/snyk_sca_scan.yaml +++ b/.github/workflows/snyk_sca_scan.yaml @@ -1,8 +1,5 @@ name: Snyk Software Composition Analysis Scan on: - push: - branches: - - '*' pull_request: branches: - master @@ -25,4 +22,4 @@ jobs: env: SNYK_TOKEN: ${{ secrets.SNYK_API_TOKEN }} with: - args: --debug --strict-out-of-sync=false --detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=critical \ No newline at end of file + args: --all-projects --strict-out-of-sync=false --detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=critical \ No newline at end of file diff --git a/.github/workflows/snyk_static_analysis_scan.yaml b/.github/workflows/snyk_static_analysis_scan.yaml index 5b275aab..6830bf60 100644 --- a/.github/workflows/snyk_static_analysis_scan.yaml +++ b/.github/workflows/snyk_static_analysis_scan.yaml @@ -2,9 +2,6 @@ name: Snyk Static Analysis Scan # This SAST (Static Application Security Testing) scan is used to scan # our first-party code for security vulnerabilities on: - push: - branches: - - '*' pull_request: branches: - master @@ -19,4 +16,4 @@ jobs: env: SNYK_TOKEN: ${{ secrets.SNYK_API_TOKEN }} continue-on-error: true - run: snyk code test --strict-out-of-sync=false --detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=high + run: snyk code test --all-projects --strict-out-of-sync=false --detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=high