File tree 1 file changed +11
-5
lines changed 1 file changed +11
-5
lines changed Original file line number Diff line number Diff line change 1
1
name : Snyk Software Composition Analysis Scan
2
+ # This git workflow leverages Snyk actions to perform a Software Composition
3
+ # Analysis scan on our Opensource libraries upon Pull Requests to Master &
4
+ # Develop branches. We use this as a control to prevent vulnerable packages
5
+ # from being introduced into the codebase.
2
6
on :
3
7
pull_request :
4
8
branches :
9
13
runs-on : ubuntu-latest
10
14
strategy :
11
15
matrix :
12
- node-version : [16 .x]
16
+ node-version : [20 .x]
13
17
steps :
14
18
- uses : actions/checkout@v3
15
19
- name : Setting up Node
16
- # - name: Use Node.js ${{ matrix.node-version }}
17
20
uses : actions/setup-node@v3
18
21
with :
19
22
node-version : ${{ matrix.node-version }}
20
- - name : Run Snyk to check for opensource vulnerabilities
21
- uses : snyk/actions/setup@master
23
+ - name : Installing snyk-delta and dependencies
24
+ run : npm i -g snyk-delta
25
+ - uses : snyk/actions/setup@master
26
+ - name : Perform SCA Scan
27
+ continue-on-error : false
22
28
run : |
23
- snyk test --all-projects --strict-out-of-sync=false -- detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=critical
29
+ snyk test --all-projects --detection-depth=4 --exclude=docker,Dockerfile --severity-threshold=critical
24
30
env :
25
31
SNYK_TOKEN : ${{ secrets.SNYK_API_TOKEN }}
You can’t perform that action at this time.
0 commit comments