oncall-engine/.github/workflows/synk.yml
Michael Derynck 3142c8f396
Build actions (#38)
* Drone, github action changes

* Minor version updates

* Update frontend dependencies

* Re-enable unit test

Co-authored-by: Michael Derynck <michael.derynck@grafana.com>
2022-06-13 14:59:44 -06:00

30 lines
No EOL
738 B
YAML

name: snyk
on:
push:
branches: [ main,dev ]
pull_request:
branches: [ main,dev ]
jobs:
security-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: actions/setup-python@v4
with:
python-version: '3.9'
- uses: actions/setup-node@v3
with:
node-version: 14
- uses: snyk/actions/setup@master
- name: Install Dependencies
run: |
pip install -r engine/requirements.txt
cd grafana-plugin/
yarn --network-timeout 500000
- name: Run Snyk
continue-on-error: true
run: snyk test --all-projects --severity-threshold=high
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}