diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml
index a642aef..b76d356 100644
--- a/.github/workflows/sca-scan.yml
+++ b/.github/workflows/sca-scan.yml
@@ -5,15 +5,17 @@ on:
 jobs:
   security-sca:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@master
-      - uses: snyk/actions/setup@master
-      - name: Setup .NET
-        uses: actions/setup-dotnet@v3.0.3
-      - name: Restore dependencies
-        run: dotnet restore ./Contentstack.Utils.sln
+      - uses: actions/checkout@master
       - name: Run Snyk to check for vulnerabilities
-        run: cd Contentstack.Utils && snyk test --fail-on=all
+        uses: snyk/actions/dotnet@master
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --fail-on=all
+          json: true
+        continue-on-error: true
+      - uses: contentstack/sca-policy@main