fixes

Author: therealbenpai

.github/workflows/security.yml

@@ -24,36 +24,35 @@ jobs:
         uses: actions/setup-node@v3
         with:
           node-version: 20
+      - name: Install Dependencies
+        run: npm i
       - name: Prepare Snyk
         uses: snyk/actions/setup@master
-      - name: Install ESLint
-        run: |
-          npm install eslint@latest
-          npm install @microsoft/[email protected]
-      - name: Prepare CodeQL
-        uses: github/codeql-action/init@v2
-        with:
-          languages: javascript
       - name: Run Snyk Code test
-        run: snyk code test --sarif > snyk-code.sarif || true
+        run: snyk code test --sarif > snyk-code.sarif
+        continue-on-error: true
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      - name: Upload Snyk results to GitHub
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: snyk-code.sarif
+          wait-for-processing: true
       - name: Run ESLint
         run: npx eslint .
           --format @microsoft/eslint-formatter-sarif
           --output-file eslint-results.sarif
         continue-on-error: true
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
-        with:
-          category: "/language:javascript"
       - name: Upload ESLint results to GitHub
         uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: eslint-results.sarif
           wait-for-processing: true
-      - name: Upload Snyk results to GitHub
-        uses: github/codeql-action/upload-sarif@v2
+      - name: Prepare CodeQL
+        uses: github/codeql-action/init@v2
         with:
-          sarif_file: snyk-code.sarif
-          wait-for-processing: true
+          languages: javascript
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+        with:
+          category: "/language:javascript"

.gitignore

@@ -16,6 +16,7 @@ lib-cov
 *.gz
 coverage
 .nyc_output
+*.sarif
 
 # Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)
 .grunt