Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions .github/workflows/snyk_scan.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
# This workflow automates the process of identifying potential security vulnerabilities
# using Snyk. Dependency vulnerability scans will be run when a push is made to the main
# branch, on a weekly schedule, and can also be triggered manually.

name: Snyk Vulnerability Scan
on:
workflow_dispatch:
schedule:
- cron: '00 15 * * 1'
push:
branches:
- main

jobs:
security:
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v3
with:
ref: 'main'

- name: Run Snyk To Check For Vulnerabilities
uses: snyk/actions/gradle@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: test
args: --all-sub-projects --org=java-agent --configuration-matching='(^compileClasspath$)|(^runtimeClasspath$)'