Setup snyk scan (#7)

sujeet-agrahari · Jul 23, 2023 · 9190f9c · 9190f9c
1 parent 4e9c69f
commit 9190f9c
Show file tree

Hide file tree

Showing 4 changed files with 10,152 additions and 4 deletions.
diff --git a/.github/workflows/snyk-scan.yaml b/.github/workflows/snyk-scan.yaml
@@ -0,0 +1,29 @@
+name: Snyk Scan
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Get Node v16
+        uses: actions/setup-node@v3
+        with:
+          node-version: 16
+
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        continue-on-error: true
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: code test --sarif
+          args: --sarif-file-output=snyk.sarif
+
+      # Push the Snyk Code results into GitHub Code Scanning tab
+      - name: Upload result to GitHub Code Scanning
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: snyk.sarif