(DIO-3134) Scan repo with Snyk

This commit is contained in:
suckatrash 2022-05-02 13:46:21 -07:00
parent e012919f08
commit 596e0d83f9
No known key found for this signature in database
GPG key ID: 1A9EE78B881BED99

23
.github/workflows/snyk_scan.yaml vendored Normal file
View file

@ -0,0 +1,23 @@
name: Snyk Scan
on:
workflow_dispatch:
push:
branches:
- master
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: setup ruby
uses: ruby/setup-ruby@v1
with:
ruby-version: 2.7
- name: create lock
run: bundle lock
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/ruby@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_DIO_KEY }}
with:
command: monitor