Skip to content

Commit 0114f7f

Browse files
author
bitsoex
committed

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed
Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
jobs:
2+
security:
3+
name: Run Snyk to check for gradle vulnerabilities
4+
runs-on: ubuntu-latest
5+
steps:
6+
- uses: actions/checkout@v4
7+
- env:
8+
GITHUB_ACTOR: ${{secrets.SVC_SNYK_ACTOR}}
9+
GITHUB_TOKEN: ${{secrets.SVC_SNYK_TOKEN}}
10+
SNYK_TOKEN: ${{secrets.SNYK_TOKEN}}
11+
name: Run Snyk to check for vulnerabilities
12+
uses: snyk/actions/gradle@4a528b5c534bb771b6e3772656a8e0e9dc902f8b
13+
with:
14+
args: --detection-depth=5 --all-sub-projects
15+
command: monitor
16+
- env:
17+
SLACK_BOT_TOKEN: ${{ secrets.EC_SLACK_TOKEN }}
18+
if: ${{ failure() }}
19+
name: Notify on Snyk gradle check failure
20+
uses: slackapi/slack-github-action@e28cf165c92ffef168d23c5c9000cffc8a25e117
21+
with:
22+
channel-id: snyk-health-check
23+
payload: '{"text": ":warning-1: Snyk gradle check failed on `${{ github.repository }}`. Check the <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|action run> for more details."}'
24+
name: Snyk Gradle Check
25+
"on":
26+
schedule:
27+
- cron: 0 10 * * 1,3,5
28+
workflow_dispatch: null

0 commit comments

Comments
 (0)