Merge pull request #1350 from guardian/mm/gha-snyk

Add GitHub Action for Snyk
guardian · Jan 6, 2022 · 6b3ad2d · 6b3ad2d
2 parents a4b6c1d + 82e8315
commit 6b3ad2d
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -0,0 +1,14 @@
+name: Snyk
+on: push
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: monitor
+          args: --org=${{ secrets.SNYK_ORG_NAME }} --project-name=${{ secrets.SNYK_PROJECT_NAME }}