SNOW-1812871: Setup pipeline with warnings #1051
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Snyk-PR | |
| on: | |
| pull_request: | |
| branches: | |
| - master | |
| permissions: | |
| contents: read | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| snyk: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event.pull_request.user.login == 'sfc-gh-snyk-sca-sa' }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| ref: ${{ github.event.pull_request.head.ref }} | |
| fetch-depth: 0 | |
| - name: Checkout Action | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: snowflakedb/whitesource-actions | |
| token: ${{ secrets.WHITESOURCE_ACTION_TOKEN }} | |
| path: whitesource-actions | |
| - name: Snyk Pull Request Scan Check | |
| uses: ./whitesource-actions/snyk-pr | |
| env: | |
| PR_TITLE: ${{ github.event.pull_request.title }} | |
| with: | |
| jira_token: ${{ secrets.JIRA_TOKEN_PUBLIC_REPO }} | |
| gh_token: ${{ secrets.GITHUB_TOKEN }} | |
| amend: false # true if you want the commit to be amended with the JIRA number |