Skip to content
This repository has been archived by the owner on Oct 13, 2022. It is now read-only.

SEC-229 | Initial Commit of Snyk Git Actions #186

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

cypresschris
Copy link

This PR adds security controls in support of vulnerability scanning for third party packages as well as first party code.

Snyk is already implemented, but these actions bring the Cypress Tools into alignment with our vulnerability management strategy. The actions that this pull request introduces send the scan results back to the Snyk dashboard. The Snyk dashboard is then coupled with branch protection rules that dictate our levels of protection by blocking PRs where this git action fails as a check.

Once the solution is fully implemented, the failures you see on the PR related to this would prevent merges of the code to the 'develop' and 'master' branches. The exit status it failed with today indicates that there is a critical vulnerability in the code base. This PR aims to increase this type of visibility.

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@cypresschris cypresschris requested a review from admah September 26, 2022 15:34
@admah admah mentioned this pull request Sep 27, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants