This repository has been archived by the owner on Dec 12, 2024. It is now read-only.

install fossa and snyk #2

	name: Security Checks

	on:
	pull_request_target:
	branches:
	- main

	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	jobs:
	security-action:
	name: Security Analysis
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	ref: ${{ github.head_ref }}

	- name: test files
	run: ls -la

	- name: Install Snyk
	uses: snyk/actions/setup@3e2680e8df93a24b52d119b1305fb7cedc60ceae # latest master (no released tag)

	- name: Snyk VULN and License Check Test
	run: snyk test --all-projects --sarif-file-output=snyk.sarif
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

	- name: 'Run FOSSA Scan'
	uses: fossas/fossa-action@main # Use a specific version if locking is preferred
	with:
	api-key: ${{ secrets.FOSSA_API_KEY }}

	- name: 'Run FOSSA Test'
	uses: fossas/fossa-action@main # Use a specific version if locking is preferred
	with:
	api-key: ${{ secrets.FOSSA_API_KEY }}
	run-tests: true

Provide feedback