name: Snyk on: schedule: - cron: "30 2 * * *" jobs: golang: if: github.repository == 'argoproj/argo-workflows' runs-on: ubuntu-latest steps: - uses: actions/checkout@master - name: Run Snyk to check for vulnerabilities uses: snyk/actions/golang@master env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: args: --severity-threshold=high node: if: github.repository == 'argoproj/argo-workflows' runs-on: ubuntu-latest steps: - uses: actions/checkout@master - run: yarn --cwd ui install - name: Run Snyk to check for vulnerabilities uses: snyk/actions/node@master env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: args: --file=ui/package.json --severity-threshold=high