Merge pull request #117 from newrelic/pin-github-action #27

	# This workflow automates the process of identifying potential security vulnerabilities
	# using Snyk. Dependency vulnerability scans will be run when a push is made to the main
	# branch, on a weekly schedule, and can also be triggered manually.

	name: Snyk Vulnerability Scan
	on:
	workflow_dispatch:
	schedule:
	- cron: '00 15 * * 1'
	push:
	branches:
	- main

	jobs:
	security:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout Code
	uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin@v4
	with:
	ref: 'main'

	- name: Run Snyk To Check For Vulnerabilities
	uses: snyk/actions/gradle-jdk11@8349f9043a8b7f0f3ee8885bf28f0b388d2446e8 # pin@master
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	with:
	command: monitor
	args: --all-sub-projects --org=java-agent --configuration-matching='(^compileClasspath$)\|(^runtimeClasspath$)'

Provide feedback