From d3e6c3feb9b8a26b5bf46921a48393918e2ab27a Mon Sep 17 00:00:00 2001 From: Paul Boocock Date: Wed, 10 Jun 2020 09:09:42 +0100 Subject: [PATCH] Add snyk monitor to Github Actions (close #253) --- .github/workflows/snyk.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/snyk.yml diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml new file mode 100644 index 00000000..51c8f4fc --- /dev/null +++ b/.github/workflows/snyk.yml @@ -0,0 +1,21 @@ + +name: Snyk + +on: + push: + branches: [ master ] + +jobs: + security: + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + + - name: Run Snyk to check for vulnerabilities + uses: snyk/actions/gradle@master + with: + command: monitor + args: --org=data-value + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}