-
Notifications
You must be signed in to change notification settings - Fork 6
35 lines (31 loc) · 885 Bytes
/
snyk.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
name: Snyk
on:
push:
branches: [ main ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ main ]
schedule:
- cron: '31 10 * * 0'
permissions:
contents: read
jobs:
snyk:
name: Snyk
runs-on: ubuntu-latest
steps:
- uses: step-security/harden-runner@29e9ae12297382bde04e940b27e0638029f9f3cd
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.snyk.io:443
github.com:443
proxy.golang.org:443
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/golang@640e31719aac3e44867d239dc86c20c3e34c8e4f
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: --sarif-file-output=snyk.sarif