Merge pull request #19 from fireblocks/COR-18756-snyk-workflow

Add Snyk workflow

.github/workflows/publish-npm.yml

@@ -9,12 +9,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-        with:
-          token: ${{ secrets.RELEASE_TOKEN }}
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v3
         with:
           node-version: '12.x'
-          registry-url: 'https://registry.npmjs.org'
+          registry-url: 'https://registry.npmjs.org/'
       - run: npm install
       - run: |
           initialTag=${{ github.event.release.tag_name }}

.github/workflows/snyk.yml

@@ -0,0 +1,25 @@
+name: Snyk Container
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+jobs:
+  snyk:
+    permissions:
+      contents: read
+      security-events: write
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - name: Run Snyk to check for vulnerabilities
+      uses: snyk/actions/node@master
+      env:
+        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      with:
+          args: --sarif-file-output=snyk.sarif
+      continue-on-error: true
+    - name: Upload result to GitHub Code Scanning
+      uses: github/codeql-action/upload-sarif@v2
+      with:
+        sarif_file: snyk.sarif