Skip to content

Commit aed3f8f

Browse files
committed
Create snyk-security.yml
Update snyk-security.yml - debug Update snyk-security.yml removed debug flag for synk code test -d Update snyk-security.yml debug Update snyk-security.yml simplified action Update snyk-security.yml debug Update snyk-security.yml debug Update snyk-security.yml
1 parent 7991ccc commit aed3f8f

1 file changed

Lines changed: 43 additions & 0 deletions

File tree

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
# This workflow uses actions that are not certified by GitHub.
2+
# They are provided by a third-party and are governed by
3+
# separate terms of service, privacy policy, and support
4+
# documentation.
5+
6+
# A sample workflow which sets up Snyk to analyze the full Snyk platform (Snyk Open Source, Snyk Code,
7+
# Snyk Container and Snyk Infrastructure as Code)
8+
# The setup installs the Snyk CLI - for more details on the possible commands
9+
# check https://docs.snyk.io/snyk-cli/cli-reference
10+
# The results of Snyk Code are then uploaded to GitHub Security Code Scanning
11+
#
12+
# In order to use the Snyk Action you will need to have a Snyk API token.
13+
# More details in https://github.com/snyk/actions#getting-your-snyk-token
14+
# or you can signup for free at https://snyk.io/login
15+
#
16+
# For more examples, including how to limit scans to only high-severity issues
17+
# and fail PR checks, see https://github.com/snyk/actions/
18+
19+
name: Snyk Security
20+
21+
on:
22+
push:
23+
branches: ["master" ]
24+
pull_request:
25+
branches: ["master"]
26+
27+
permissions:
28+
contents: read
29+
30+
jobs:
31+
snyk:
32+
runs-on: ubuntu-latest
33+
steps:
34+
- uses: actions/checkout@master
35+
36+
- name: node init
37+
run: npm install
38+
39+
- name: Run Snyk to check for vulnerabilities
40+
uses: snyk/actions/node@master
41+
env:
42+
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
43+

0 commit comments

Comments
 (0)