feat: snyk (#4)

JonathanHope · Dec 6, 2023 · 80951fe · 80951fe
1 parent e3331d7
commit 80951fe
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -39,3 +39,8 @@ jobs:
       - name: Build
         run: npm run build
         shell: nix develop --command bash -e {0}
+      - name: Vulns
+        run: snyk auth $SNYK_TOKEN && npm run vulns
+        shell: nix develop --command bash -e {0}
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
diff --git a/flake.nix b/flake.nix
@@ -18,6 +18,7 @@
           buildInputs = with pkgs;[
             nodejs_20
             jq
+            snyk
           ];
           shellHook = ''
             export PATH=$PWD/tools:$PATH

diff --git a/package.json b/package.json
@@ -10,6 +10,7 @@
     "build-chrome": "./scripts/build.sh chrome",
     "build": "npm run clean && npm run build-firefox && npm run build-chrome",
     "storybook": "storybook dev -p 6006",
+    "vulns": "snyk test",
     "test": "tap --node-arg=--require=global-jsdom/register --disable-coverage --allow-empty-coverage run"
   },
   "dependencies": {