Skip to content

Commit ed5198e

Browse files
committed
chore: update snyk to use node 20
1 parent 796d2bf commit ed5198e

File tree

1 file changed

+15
-8
lines changed

1 file changed

+15
-8
lines changed

.github/workflows/snyk_sca_scan.yaml

Lines changed: 15 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,32 @@
11
name: Snyk Software Composition Analysis Scan
2+
# This git workflow leverages Snyk actions to perform a Software Composition
3+
# Analysis scan on our Opensource libraries upon Pull Requests to Master &
4+
# Develop branches. We use this as a control to prevent vulnerable packages
5+
# from being introduced into the codebase.
26
on:
3-
pull_request:
4-
branches:
7+
pull_request_target:
8+
types:
9+
- opened
10+
branches:
511
- master
6-
- develop
712
jobs:
813
Snyk_SCA_Scan:
914
runs-on: ubuntu-latest
1015
strategy:
1116
matrix:
12-
node-version: [16.x]
17+
node-version: [20.x]
1318
steps:
1419
- uses: actions/checkout@v3
1520
- name: Setting up Node
16-
#- name: Use Node.js ${{ matrix.node-version }}
1721
uses: actions/setup-node@v3
1822
with:
1923
node-version: ${{ matrix.node-version }}
20-
- name: Run Snyk to check for opensource vulnerabilities
21-
uses: snyk/actions/setup@master
24+
- name: Installing snyk-delta and dependencies
25+
run: npm i -g snyk-delta
26+
- uses: snyk/actions/setup@master
27+
- name: Perform SCA Scan
28+
continue-on-error: false
2229
run: |
23-
snyk test --all-projects --strict-out-of-sync=false --detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=critical
30+
snyk test --all-projects --detection-depth=4 --exclude=docker,Dockerfile --severity-threshold=critical
2431
env:
2532
SNYK_TOKEN: ${{ secrets.SNYK_API_TOKEN }}

0 commit comments

Comments
 (0)