Skip to content

Commit

Permalink
updated snyk scan rules and file name (#109)
Browse files Browse the repository at this point in the history
  • Loading branch information
deleonenriqueta authored Aug 22, 2023
1 parent 73ef174 commit 2bcb8a9
Show file tree
Hide file tree
Showing 2 changed files with 29 additions and 14 deletions.
14 changes: 0 additions & 14 deletions .github/workflows/snyk.yml

This file was deleted.

29 changes: 29 additions & 0 deletions .github/workflows/snyk_scan.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
# This workflow automates the process of identifying potential security vulnerabilities
# using Snyk. Dependency vulnerability scans will be run when a push is made to the main
# branch, on a weekly schedule, and can also be triggered manually.

name: Snyk Vulnerability Scan
on:
workflow_dispatch:
schedule:
- cron: '00 15 * * 1'
push:
branches:
- main

jobs:
security:
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v3
with:
ref: 'main'

- name: Run Snyk To Check For Vulnerabilities
uses: snyk/actions/gradle@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: monitor
args: --all-sub-projects --org=java-agent --configuration-matching='(^compileClasspath$)|(^runtimeClasspath$)'

0 comments on commit 2bcb8a9

Please sign in to comment.