Merge pull request #78 from cyber-dojo/snyk-attachments

Add --attachment flag to kosli-attest-snyk calls in Workflow
cyber-dojo · Dec 17, 2024 · ec21774 · ec21774
2 parents 41ce8c9 + c43add9
commit ec21774
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -152,6 +152,7 @@ jobs:
         if: ${{ github.ref == 'refs/heads/main' && (success() || failure()) }}
         run:
           kosli attest snyk
+            --attachments=.snyk
             --name=runner.snyk-code-scan 
             --scan-results="${SARIF_FILENAME}"
 
@@ -377,6 +378,7 @@ jobs:
           KOSLI_FINGERPRINT: ${{ needs.build-image.outputs.artifact_digest }}
         run:
           kosli attest snyk 
+            --attachments=.snyk          
             --name=runner.snyk-container-scan 
             --scan-results="${SARIF_FILENAME}"