diff --git a/.github/workflows/snyk-container.yml b/.github/workflows/snyk-container.yml new file mode 100644 index 000000000..39b4d0fac --- /dev/null +++ b/.github/workflows/snyk-container.yml @@ -0,0 +1,29 @@ +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. + +# A sample workflow which checks out the code, builds a container +# image using Docker and scans that image for vulnerabilities using +# Snyk. The results are then uploaded to GitHub Security Code Scanning +# +# For more examples, including how to limit scans to only high-severity +# issues, monitor images for newly disclosed vulnerabilities in Snyk and +# fail PR checks for new vulnerabilities, see https://github.com/snyk/actions/ + +name: Snyk workflow with no block +on: push +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + - name: install Snyk CLI + run: npm install -g snyk + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + - name: run Snyk Open Source Test + run: snyk test + continue-on-error: true + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}