File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ # This workflow uses actions that are not certified by GitHub.
2+ # They are provided by a third-party and are governed by
3+ # separate terms of service, privacy policy, and support
4+ # documentation.
5+
6+ # A sample workflow which sets up Snyk to analyze the full Snyk platform (Snyk Open Source, Snyk Code,
7+ # Snyk Container and Snyk Infrastructure as Code)
8+ # The setup installs the Snyk CLI - for more details on the possible commands
9+ # check https://docs.snyk.io/snyk-cli/cli-reference
10+ # The results of Snyk Code are then uploaded to GitHub Security Code Scanning
11+ #
12+ # In order to use the Snyk Action you will need to have a Snyk API token.
13+ # More details in https://github.com/snyk/actions#getting-your-snyk-token
14+ # or you can signup for free at https://snyk.io/login
15+ #
16+ # For more examples, including how to limit scans to only high-severity issues
17+ # and fail PR checks, see https://github.com/snyk/actions/
18+
19+ name : Snyk Security
20+
21+ on :
22+ push :
23+ branches : ["master" ]
24+ pull_request :
25+ branches : ["master"]
26+
27+ permissions :
28+ contents : read
29+
30+ jobs :
31+ snyk :
32+ runs-on : ubuntu-latest
33+ steps :
34+ - uses : actions/checkout@master
35+
36+ - name : node init
37+ run : npm install
38+
39+ - name : Run Snyk to check for vulnerabilities
40+ uses : snyk/actions/node@master
41+ env :
42+ SNYK_TOKEN : ${{ secrets.SNYK_TOKEN }}
43+
You can’t perform that action at this time.
0 commit comments