Skip to content

Commit c8e1eaa

Browse files
committed
Add Snyk GitHub Action workflow for vulnerability scanning
1 parent 19d6763 commit c8e1eaa

1 file changed

Lines changed: 29 additions & 0 deletions

File tree

.github/workflows/snyk.yml

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
name: Snyk Vulnerability Scan
2+
3+
on:
4+
push:
5+
branches: [ main ]
6+
pull_request:
7+
branches: [ main ]
8+
9+
jobs:
10+
snyk:
11+
runs-on: ubuntu-latest
12+
steps:
13+
- name: Checkout repository
14+
uses: actions/checkout@v4
15+
16+
- name: Setup Node.js
17+
uses: actions/setup-node@v4
18+
with:
19+
node-version: '20'
20+
21+
- name: Install dependencies
22+
run: npm install
23+
24+
- name: Run Snyk security scan
25+
uses: snyk/actions/node@master
26+
env:
27+
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
28+
with:
29+
args: test --severity-threshold=high

0 commit comments

Comments
 (0)