Snyk workflow failure

abstractj · abstractj · commit 6967f57f39d5 · 2024-03-11T11:10:58.000-03:00
Closes #27761 Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
diff --git a/.github/workflows/snyk-analysis.yml b/.github/workflows/snyk-analysis.yml
@@ -30,7 +30,8 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
 
       - name: Upload Quarkus scanner results to GitHub
-        uses: github/codeql-action/upload-sarif@v3
+      # Downgraded to v2 due to the issues related with security-severity field
+        uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: quarkus-report.sarif
           category: snyk-quarkus-report
@@ -44,7 +45,8 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
 
       - name: Upload Operator scanner results to GitHub
-        uses: github/codeql-action/upload-sarif@v3
+      # Downgraded to v2 due to the issues related with security-severity field
+        uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: operator-report.sarif
           category: snyk-operator-report
