Merge pull request #11 from guardian/add-generic-snyk-workflow

Adds generic sbt node snyk workflow

.github/workflows/sbt-node-snyk.yml

@@ -0,0 +1,41 @@
+name: Simple Snyk monitor for SBT + Node
+
+on:
+  workflow_call:
+    inputs:
+      DEBUG:
+        type: string
+        required: false
+      ORG:
+        type: string
+        required: true
+      JAVA_VERSION:
+        type: string
+        required: false
+        default: "11"
+    secrets:
+      SNYK_TOKEN:
+        required: true
+
+jobs:
+    security:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout branch
+              uses: actions/checkout@v2
+
+            - uses: snyk/actions/setup@0.3.0
+            - uses: actions/setup-node@v2
+              with:
+                  node-version-file: '.nvmrc'
+
+            - uses: actions/setup-java@v2
+              with:
+                  java-version: ${{ inputs.JAVA_VERSION }}
+                  distribution: "adopt"
+
+            - name: Snyk monitor
+              run: snyk monitor ${INPUT_DEBUG:+ -d} --all-projects --org="${{ inputs.ORG }}"
+              env:
+                  SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+                  INPUT_DEBUG: ${{ inputs.DEBUG }}