add snky step

podaac · Jan 21, 2025 · bd82adf · bd82adf
1 parent 2ca1478
commit bd82adf
Showing 1 changed file with 12 additions and 11 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -270,18 +270,19 @@ jobs:
       #         --severity-threshold=high
       #         --fail-on=all
 
-      # # This step will send the results of snyk to the snyk servers
-      # - name: Run Snyk on Python
-      #   uses: snyk/actions/python-3.8@master
-      #   env:
-      #     SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-      #   with:
-      #     command: monitor
-      #     args: >
-      #       --org=${{ secrets.SNYK_ORG_ID }}
-      #       --project-name=${{ github.repository }}
+      - name: Run Snyk as a blocking step
+       uses: snyk/actions/gradle@master
+       env:
+           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+           JAVA_HOME: /usr/lib/jvm/default-java/
+       with:
+         command: test
+         args:
+             --org=${{ secrets.SNYK_ORG_ID }}
+             --project-name=${{ github.repository }}
+             --severity-threshold=high
+             --fail-on=all
 
-      # Lastly run the tests bundled with the repo
       - name: Test and coverage
         run: |
           gradle wrapper --gradle-version 6.3