The Github action to scan for vulnerabilities using Snyk fails
Erikvl87 opened this issue · 1 comments
Erikvl87 commented
The Github action to scan for vulnerabilities using Snyk suddenly fails. This seems to be caused by the SARIF file in which the security severity is unset.
Code Scanning could not process the submitted SARIF file: could not convert rules: invalid security severity value, is not a number: null
For more information: github/codeql-action#2187
Erikvl87 commented
Next to undefined
, the snyk.sarif file also contained null
as a value for security-severity
property. undefined
should be related to license files (according to github/codeql-action#2187), while null
seemed to be caused by CVE-2024-2511.
In both cases, the value will be replaced with 0
.