[chore(deps-nextjs)]: Bump vercel from 51.0.0 to 52.0.0 in /packages/nextjs #797
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Snyk Security: Code (SAST), Open Source (SCA), optional IaC and Container. | |
| # Requires SNYK_TOKEN in repository secrets: https://github.com/snyk/actions#getting-your-snyk-token | |
| name: Snyk Security | |
| on: | |
| push: | |
| branches: ["main"] | |
| pull_request: | |
| branches: ["main"] | |
| env: | |
| FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| snyk: | |
| permissions: | |
| contents: read | |
| security-events: write | |
| actions: read | |
| runs-on: ubuntu-latest | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: "20" | |
| cache: "yarn" | |
| - name: Install dependencies | |
| run: yarn install --immutable | |
| - name: Set up Snyk CLI | |
| uses: snyk/actions/setup@9adf32b1121593767fc3c057af55b55db032dc04 | |
| # Snyk Code: produce SARIF for GitHub Code Scanning; do not fail the job on findings | |
| - name: Snyk Code test | |
| run: snyk code test --sarif --sarif-file-output=snyk-code.sarif || true | |
| - name: Upload Snyk Code to GitHub Code Scanning | |
| uses: github/codeql-action/upload-sarif@v4 | |
| with: | |
| sarif_file: snyk-code.sarif | |
| continue-on-error: true | |
| - name: Snyk Open Source monitor | |
| run: snyk monitor --all-projects | |
| continue-on-error: true | |
| - name: Snyk IaC test and report | |
| run: snyk iac test --report || true | |
| # Only run Docker/Container steps if a Dockerfile exists | |
| - name: Build Docker image | |
| if: hashFiles('Dockerfile') != '' | |
| run: docker build -t aeternum-app:${{ github.sha }} . | |
| - name: Snyk Container monitor | |
| if: hashFiles('Dockerfile') != '' | |
| run: snyk container monitor aeternum-app:${{ github.sha }} --file=Dockerfile | |
| continue-on-error: true |