diff --git a/.github/workflows/security_sdlc_snyk_container_analysis.yaml b/.github/workflows/security_sdlc_snyk_container_analysis.yaml new file mode 100644 index 0000000..b9e7c93 --- /dev/null +++ b/.github/workflows/security_sdlc_snyk_container_analysis.yaml @@ -0,0 +1,32 @@ +name: sdlc_snyk_container_analysis + +on: + pull_request: + types: [opened, synchronize, reopened] + branches: [main] + +jobs: + wait-for-pr-ci: + uses: OutSystems/sdlc-gha-snyk/.github/workflows/wait-for-pr-check.yml@v1 + secrets: inherit + with: + commitSha: ${{ github.event.pull_request.head.sha }} + runnerName: wait-for-pr-ci + checkName: SDLC.TestNotes.Provider.Service-PR # YOU NEED TO EDIT THIS + + call-sdlc-snyk-container: + needs: wait-for-pr-ci + uses: OutSystems/sdlc-gha-snyk/.github/workflows/snyk-container.yml@v1.4.2 #This is in a non-blokcing mode + secrets: inherit + with: + serviceName: "outsystems-sdlc-testnotes-service" # YOU NEED TO EDIT THIS + commitSha: ${{ github.event.pull_request.head.sha }} + dockerFilePath: Dockerfile # YOU (MAY) NEED TO EDIT THIS + call-sdlc-snyk-container-ct: + needs: wait-for-pr-ci + uses: OutSystems/sdlc-gha-snyk/.github/workflows/snyk-container.yml@v1.4.2 #This is in a non-blokcing mode + secrets: inherit + with: + serviceName: "outsystems-sdlc-testnotes-service-ct" # YOU NEED TO EDIT THIS + commitSha: ${{ github.event.pull_request.head.sha }} + dockerFilePath: Dockerfile # YOU (MAY) NEED TO EDIT THIS \ No newline at end of file