Update frontend and backend snyk jobs with cli method

CalPinSW · Jun 26, 2024 · f6088ee · f6088ee
1 parent 203dcf6
commit f6088ee
Showing 1 changed file with 16 additions and 29 deletions.
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
@@ -1,31 +1,8 @@
 name: Snyk Security Scan
 on: "push"
-#   schedule:
-#     - cron: "15 * * * *"
-# jobs:
-#   frontend-scan:
-#     name: frontend scan
-#     runs-on: ubuntu-latest
-#     steps:
-#       - uses: actions/checkout@master
-#       - run: cd frontend
-#       - name: Run Snyk to check for vulnerabilities
-#         uses: snyk/actions/node@master
-#         env:
-#           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-#   backend-scan:
-#     name: backend scan
-#     runs-on: ubuntu-latest
-#     steps:
-#       - uses: actions/checkout@master
-#       - run: cd backend
-#       - name: Run Snyk to check for vulnerabilities
-#         uses: snyk/actions/python@master
-#         env:
-#           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
 jobs:
-    security-scan:
-        name: security scan
+    frontend-scan:
+        name: frontend scan
         runs-on: ubuntu-latest
         steps:
             - name: Checkout Repository
@@ -38,7 +15,17 @@ jobs:
               run: snyk test
               env:
                   SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-            # - name: Run Snyk to check for vulnerabilities
-            #   uses: snyk/actions/node@master
-            #   env:
-            #       SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+    backend-scan:
+        name: backend scan
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout Repository
+              uses: actions/checkout@v4
+            - run: poetry install
+              working-directory: backend
+            - uses: snyk/actions/setup@master
+            - name: Snyk monitor
+              working-directory: backend
+              run: snyk test
+              env:
+                  SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}