66e8cf2cbc
* Log (failed) attempt to notify a user with viewer role * Remove https:// prefix from BASE_URL docker env var * Fix cloud heartbeat name * Polishing telegram * Update docker-compose.yml * Update plugin README (#48) * Update README and screenshot, remove plop for build info since version is now displayed prominently * Sign build Co-authored-by: Michael Derynck <michael.derynck@grafana.com> * Build actions (#38) * Drone, github action changes * Minor version updates * Update frontend dependencies * Re-enable unit test Co-authored-by: Michael Derynck <michael.derynck@grafana.com> * Revert stylelint version (#52) * Revert stylelint version * Build plugin as well as lint * Build in previous step Co-authored-by: Michael Derynck <michael.derynck@grafana.com> * Update screenshot (#53) Co-authored-by: Michael Derynck <michael.derynck@grafana.com> Co-authored-by: Matias Bordese <mbordese@gmail.com> Co-authored-by: Matvey Kukuy <Matvey-Kuk@users.noreply.github.com> Co-authored-by: Innokentii Konstantinov <innokenty.konstantinov@grafana.com> Co-authored-by: Matvey Kukuy <matvey@amixr.io> Co-authored-by: Michael Derynck <michael.derynck@grafana.com>
30 lines
No EOL
738 B
YAML
30 lines
No EOL
738 B
YAML
name: snyk
|
|
|
|
on:
|
|
push:
|
|
branches: [ main,dev ]
|
|
pull_request:
|
|
branches: [ main,dev ]
|
|
|
|
jobs:
|
|
security-scan:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: actions/setup-python@v4
|
|
with:
|
|
python-version: '3.9'
|
|
- uses: actions/setup-node@v3
|
|
with:
|
|
node-version: 14
|
|
- uses: snyk/actions/setup@master
|
|
- name: Install Dependencies
|
|
run: |
|
|
pip install -r engine/requirements.txt
|
|
cd grafana-plugin/
|
|
yarn --network-timeout 500000
|
|
- name: Run Snyk
|
|
continue-on-error: true
|
|
run: snyk test --all-projects --severity-threshold=high
|
|
env:
|
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} |