forked from lucee/extension-hibernate
-
Notifications
You must be signed in to change notification settings - Fork 0
34 lines (29 loc) · 879 Bytes
/
security.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
name: Snyk Vulnerability Scan
on:
push:
branches:
- master
- main
- development
- release/**
workflow_dispatch:
# Reusable workflow : Usually called by a `snapshot` workflow
workflow_call:
jobs:
scan:
name: Run Vulnerability Scan with Snyk
runs-on: ubuntu-latest
if: "!contains(github.event.head_commit.message, '[ci skip]')"
steps:
- uses: actions/checkout@master
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/maven-3-jdk-11@master
continue-on-error: true # To make sure that SARIF upload gets called
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: --sarif-file-output=snyk.sarif
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: snyk.sarif