Add Snyk Code scanning

mpogr · Sep 3, 2024 · 0638a09 · 0638a09
1 parent e20d8a5
commit 0638a09
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/.github/workflows/Scan-with-Snyk-and-Monitor.yaml b/.github/workflows/Scan-with-Snyk-and-Monitor.yaml
@@ -1,4 +1,4 @@
-name: Scan with Snyk and Monitor
+name: Scan Open Source with Snyk and Monitor
 on: push
 jobs:
   security:

diff --git a/.github/workflows/Scan-with-Snyk-code.yaml b/.github/workflows/Scan-with-Snyk-code.yaml
@@ -0,0 +1,14 @@
+name: Scan Open Source with Snyk and Monitor
+on: push
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Run Snyk to check for SAST vulnerabilities
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --all-projects --severity-threshold=critical
+          command: code