Skip to content

Conversation

@domsolutions
Copy link
Contributor

Motivation

We want to be sent alerts from Snyk when our docker images are found to contain CVEs. We don't want to have to trigger a workflow manually to find this out.

Summary of changes

  • when we release, build images and instruct Snyk to monitor images
  • only monitor if a docker tag is set i.e. a new release

Checklist

  • Added/updated unit tests
  • Added/updated documentation
  • Checked for typos in variable names, comments, etc.
  • Added licences for new files

Testing

@domsolutions domsolutions changed the title Snyk monitor imgs fix(CI): Snyk monitor images Dec 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants