Skip to content

Snyk

Snyk #58

Workflow file for this run

name: "Snyk"
on:
push:
branches:
- 'master'
- 'release-**'
paths:
- '**/deps.edn'
- '**/package.json'
- '.github/workflows/snyk.yml'
- '.github/scripts/write-poms.xml'
schedule:
- cron: '0 5 * * *'
jobs:
monitor:
name: Generate Snyk report
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v4
- name: Prepare back-end environment
uses: ./.github/actions/prepare-backend
with:
m2-cache-key: 'snyk'
- uses: snyk/actions/[email protected]
- name: Generate all pom.xml
run: .github/scripts/write-poms.sh
- name: Run snyk
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
continue-on-error: true
run: snyk test --all-projects --sarif-file-output=snyk.sarif
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: snyk.sarif