File tree Expand file tree Collapse file tree 1 file changed +15
-8
lines changed Expand file tree Collapse file tree 1 file changed +15
-8
lines changed Original file line number Diff line number Diff line change 1
1
name : Snyk Software Composition Analysis Scan
2
+ # This git workflow leverages Snyk actions to perform a Software Composition
3
+ # Analysis scan on our Opensource libraries upon Pull Requests to Master &
4
+ # Develop branches. We use this as a control to prevent vulnerable packages
5
+ # from being introduced into the codebase.
2
6
on :
3
- pull_request :
4
- branches :
7
+ pull_request_target :
8
+ types :
9
+ - opened
10
+ branches :
5
11
- master
6
- - develop
7
12
jobs :
8
13
Snyk_SCA_Scan :
9
14
runs-on : ubuntu-latest
10
15
strategy :
11
16
matrix :
12
- node-version : [16 .x]
17
+ node-version : [20 .x]
13
18
steps :
14
19
- uses : actions/checkout@v3
15
20
- name : Setting up Node
16
- # - name: Use Node.js ${{ matrix.node-version }}
17
21
uses : actions/setup-node@v3
18
22
with :
19
23
node-version : ${{ matrix.node-version }}
20
- - name : Run Snyk to check for opensource vulnerabilities
21
- uses : snyk/actions/setup@master
24
+ - name : Installing snyk-delta and dependencies
25
+ run : npm i -g snyk-delta
26
+ - uses : snyk/actions/setup@master
27
+ - name : Perform SCA Scan
28
+ continue-on-error : false
22
29
run : |
23
- snyk test --all-projects --strict-out-of-sync=false -- detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=critical
30
+ snyk test --all-projects --detection-depth=4 --exclude=docker,Dockerfile --severity-threshold=critical
24
31
env :
25
32
SNYK_TOKEN : ${{ secrets.SNYK_API_TOKEN }}
You can’t perform that action at this time.
0 commit comments