diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml
index 927ff1d..3a802b1 100644
--- a/.github/workflows/sca-scan.yml
+++ b/.github/workflows/sca-scan.yml
@@ -5,19 +5,15 @@ on:
 jobs:
   security-sca:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@master
       - uses: snyk/actions/setup@master
-      - name: Configure Git credentials
-        run: |
-          git config --global url."https://x-access-token:${{ secrets.PKG_TOKEN }}@github.com/".insteadOf "https://github.com/"
-    
-      - name: Resolve Swift package dependencies
-        run: swift package resolve
       - name: Run Snyk to check for vulnerabilities
-        run: snyk test --all-projects --fail-on=all
+        run: snyk test --all-projects --json-file-output=snyk.json
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-      - name: Cleanup credentials
-        if: always()
-        run: rm -f ~/.gitconfig
+        continue-on-error: true
+      - uses: contentstack/sca-policy@main
\ No newline at end of file