Skip to content

fix: synchronize actions with the snyk-images repository#207

Open
team-cli-bot wants to merge 1 commit into
masterfrom
auto/synchronize-snyk-variants
Open

fix: synchronize actions with the snyk-images repository#207
team-cli-bot wants to merge 1 commit into
masterfrom
auto/synchronize-snyk-variants

Conversation

@team-cli-bot

Copy link
Copy Markdown
Contributor

This PR automatically removes variants that are no longer present in the snyk-images repository.

@team-cli-bot
team-cli-bot requested review from a team as code owners May 5, 2026 15:59
@snyk-io

snyk-io Bot commented May 5, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@snyk-pr-review-bot

This comment has been minimized.

@team-cli-bot
team-cli-bot force-pushed the auto/synchronize-snyk-variants branch from 5f0283c to 347e09b Compare June 1, 2026 04:38
@snyk-pr-review-bot

This comment has been minimized.

@team-cli-bot
team-cli-bot force-pushed the auto/synchronize-snyk-variants branch from 347e09b to 41c90c1 Compare July 1, 2026 04:37
@snyk-pr-review-bot

Copy link
Copy Markdown

PR Reviewer Guide 🔍

🧪 No relevant tests
🔒 No security concerns identified
⚡ Recommended focus areas for review

Input Ignored 🟠 [major]

The transition to a composite action in python-3.9/action.yml has broken the functionality of the json input. The input is still defined in the inputs section, but it is no longer passed to the docker://snyk/snyk:python-3.9 execution step. In the original docker-based action, this might have been handled by the CLI, but in the new structure, the args string explicitly constructs the command without including logic for the json boolean flag.

args: snyk ${{ inputs.command }} ${{ inputs.args }}
Behavioral Change 🟡 [minor]

The change from using: docker to using: composite alters how the action environment is prepared. Specifically, direct docker actions automatically map the workspace and handle environment variable inheritance differently than composite actions calling a docker:// image. Users relying on specific path mappings or file permissions inside the container may experience unexpected failures.

using: "composite"
steps:
  - name: Show deprecation warning
    shell: bash
    run: echo "::warning title=Deprecated Action::The action python-3.9 is deprecated. Please visit Snyk actions at https://github.com/snyk/actions for a newer version."

  - name: Run Snyk scan
    uses: docker://snyk/snyk:python-3.9
📚 Repository Context Analyzed

This review considered 18 relevant code sections from 15 files (average relevance: 0.92)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant