From ddabd326bea78f18e2a51c62199e265beaf7c425 Mon Sep 17 00:00:00 2001
From: Aravind Kumar <aravind.kumar@contentstack.com>
Date: Sun, 2 Aug 2026 17:45:48 +0530
Subject: [PATCH] sca-scan.yml

---
 .github/workflows/sca-scan.yml | 16 ++++++----------
 1 file changed, 6 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml
index 927ff1d2..3a802b19 100644
--- a/.github/workflows/sca-scan.yml
+++ b/.github/workflows/sca-scan.yml
@@ -5,19 +5,15 @@ on:
 jobs:
   security-sca:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@master
       - uses: snyk/actions/setup@master
-      - name: Configure Git credentials
-        run: |
-          git config --global url."https://x-access-token:${{ secrets.PKG_TOKEN }}@github.com/".insteadOf "https://github.com/"
-    
-      - name: Resolve Swift package dependencies
-        run: swift package resolve
       - name: Run Snyk to check for vulnerabilities
-        run: snyk test --all-projects --fail-on=all
+        run: snyk test --all-projects --json-file-output=snyk.json
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-      - name: Cleanup credentials
-        if: always()
-        run: rm -f ~/.gitconfig
+        continue-on-error: true
+      - uses: contentstack/sca-policy@main
\ No newline at end of file