Skip to content

Commit 8501a26

Browse files
authored
chore: update snyk to use node 20 (#691)
1 parent 796d2bf commit 8501a26

File tree

1 file changed

+11
-5
lines changed

1 file changed

+11
-5
lines changed

.github/workflows/snyk_sca_scan.yaml

Lines changed: 11 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,8 @@
11
name: Snyk Software Composition Analysis Scan
2+
# This git workflow leverages Snyk actions to perform a Software Composition
3+
# Analysis scan on our Opensource libraries upon Pull Requests to Master &
4+
# Develop branches. We use this as a control to prevent vulnerable packages
5+
# from being introduced into the codebase.
26
on:
37
pull_request:
48
branches:
@@ -9,17 +13,19 @@ jobs:
913
runs-on: ubuntu-latest
1014
strategy:
1115
matrix:
12-
node-version: [16.x]
16+
node-version: [20.x]
1317
steps:
1418
- uses: actions/checkout@v3
1519
- name: Setting up Node
16-
#- name: Use Node.js ${{ matrix.node-version }}
1720
uses: actions/setup-node@v3
1821
with:
1922
node-version: ${{ matrix.node-version }}
20-
- name: Run Snyk to check for opensource vulnerabilities
21-
uses: snyk/actions/setup@master
23+
- name: Installing snyk-delta and dependencies
24+
run: npm i -g snyk-delta
25+
- uses: snyk/actions/setup@master
26+
- name: Perform SCA Scan
27+
continue-on-error: false
2228
run: |
23-
snyk test --all-projects --strict-out-of-sync=false --detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=critical
29+
snyk test --all-projects --detection-depth=4 --exclude=docker,Dockerfile --severity-threshold=critical
2430
env:
2531
SNYK_TOKEN: ${{ secrets.SNYK_API_TOKEN }}

0 commit comments

Comments
 (0)