From 088730fe5f4367d11b2339db4da221ac43b9f87a Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@rubenfiszel.com>
Date: Thu, 4 Apr 2024 00:19:23 +0200
Subject: [PATCH] snyk to sarif

---
 .github/workflows/{docker-scout.yml => docker-snyk.yml} | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)
 rename .github/workflows/{docker-scout.yml => docker-snyk.yml} (67%)

diff --git a/.github/workflows/docker-scout.yml b/.github/workflows/docker-snyk.yml
similarity index 67%
rename from .github/workflows/docker-scout.yml
rename to .github/workflows/docker-snyk.yml
index 52df14e7c9..28d70ccc32 100644
--- a/.github/workflows/docker-scout.yml
+++ b/.github/workflows/docker-snyk.yml
@@ -17,11 +17,18 @@ jobs:
       packages: write
 
     steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
       - name: Scan Docker image
         uses: snyk/actions/docker@master
         continue-on-error: true
         with:
           image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-ee:main
-          args: --severity-threshold=high
+          args: --severity-threshold=high --file=Dockerfile
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      - name: Upload result to GitHub Code Scanning
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: snyk.sarif