forked from alexeisnyk/juice-shop
-
Notifications
You must be signed in to change notification settings - Fork 105
40 lines (35 loc) · 914 Bytes
/
node.js.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
name: "Snyk Code Scan "
on:
push:
branches:
- master
jobs:
Pipeline-Job:
# Configure Environment
name: 'Snyk Code Scan'
runs-on: ubuntu-latest
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
steps:
# Checkout Code
- name: Checkout Code
uses: actions/checkout@v1
# Install and Authenticate to Snyk
- name: Install Snyk & Authenticate
run: |
sudo npm install -g snyk
snyk auth ${SNYK_TOKEN}
# Run Snyk Code
- name: Run Snyk Code
run: |
snyk code test --sarif > results.sarif
continue-on-error: true
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1
with:
# Path to SARIF file relative to the root of the repository
sarif_file: results.sarif
#Monitor
- name: Monitor
run: |
snyk monitor --org=cli-gn3 --project-name=Github