Update the version of snyk orb and Go version in scan executor

The reason for the change is that for our projects referring to Go 1.22 in their mod files, snyk scan was failing. The executor go version is intentionally just to the minor release. Add the snyk scan steps adviced for the new snyk orb version.
Financial-Times · Apr 12, 2024 · 73a6cb0 · 73a6cb0
1 parent d70b49d
commit 73a6cb0
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/src/@orb.yml b/src/@orb.yml
@@ -11,4 +11,4 @@ display:
   source_url: "https://github.com/Financial-Times/golang-ci-orb"
 
 orbs:
-  snyk: snyk/snyk@1.1.1
+  snyk: snyk/snyk@2.1.0
diff --git a/src/executors/scanner.yml b/src/executors/scanner.yml
@@ -4,7 +4,7 @@ description: >
 parameters:
   circleci-golang-image-version:
     type: string
-    default: "1.21.1"
+    default: "1.22"
 docker:
   - image: cimg/go:<<parameters.circleci-golang-image-version>>
     auth:

diff --git a/src/jobs/scan.yml b/src/jobs/scan.yml
@@ -47,3 +47,4 @@ steps:
       project: << parameters.project >>
       severity-threshold: << parameters.severity-threshold >>
       fail-on-issues: << parameters.fail-on-issues >>
+      token-variable: SNYK_TOKEN