-
Notifications
You must be signed in to change notification settings - Fork 135
41 lines (34 loc) · 1010 Bytes
/
security.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: Security
on:
push:
branches:
- "*"
pull_request:
branches: [main]
jobs:
snyk:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Create output directory
run: mkdir ~/sarif
- name: Run Snyk to check for vulnerabilities (SCA)
uses: snyk/actions/node@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: test
args: --all-projects --severity-threshold=critical --sarif-file-output=~/sarif/sca.sarif
- name: Run Snyk Static Code Analysis
uses: snyk/actions/node@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: code test
args: --severity-threshold=high --sarif-file-output=~/sarif/sast.sarif
- name: list
run: "ls -a ~/sarif"
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: ~/sarif