Skip to content

Commit

Permalink
Add Snyk scanning Github Action
Browse files Browse the repository at this point in the history
  • Loading branch information
pvannierop committed Oct 8, 2024
1 parent 1fc57f6 commit 8436676
Showing 1 changed file with 34 additions and 0 deletions.
34 changes: 34 additions & 0 deletions .github/workflows/snyk.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
name: Snyk test

on:
- pull_request

jobs:
security:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v3
- uses: snyk/actions/setup@master
with:
snyk-version: v1.1032.0

- uses: actions/setup-java@v3
with:
distribution: temurin
java-version: 17

- name: Setup Gradle
uses: gradle/gradle-build-action@v2

- name: Run Snyk to check for vulnerabilities
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
run: >
snyk test
--all-projects
--configuration-matching="^runtimeClasspath$"
--fail-on=upgradable
--org=radar-base
--policy-path=.snyk
--severity-threshold=high

0 comments on commit 8436676

Please sign in to comment.