Erikvl87/docker-languagetool

The Github action to scan for vulnerabilities using Snyk fails

Erikvl87 opened this issue · 1 comments

The Github action to scan for vulnerabilities using Snyk suddenly fails. This seems to be caused by the SARIF file in which the security severity is unset.

Code Scanning could not process the submitted SARIF file: could not convert rules: invalid security severity value, is not a number: null

For more information: github/codeql-action#2187

Next to undefined, the snyk.sarif file also contained null as a value for security-severity property. undefined should be related to license files (according to github/codeql-action#2187), while null seemed to be caused by CVE-2024-2511.

In both cases, the value will be replaced with 0.