Skip to content

Commit

Permalink
enable snyk integration with deployment (#132)
Browse files Browse the repository at this point in the history
Enable Snyk Integration With Deployment

## Description

Enable Snyk Integration With Deployment
 Added '.github/workflows/snyk-security.yml' for the same.
Project level Github integration done for 'Backstage' project on snyk
end.

![image](https://github.com/sourcefuse/backstage/assets/109595269/71e847db-c3cc-4523-9141-c9f66ce09c59)


Fixes # (issue)
#110

## Type of change

Please delete options that are not relevant.

- [ ] Bug fix (non-breaking change which fixes an issue)
- [X] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] Intermediate change (work in progress)

## How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration

- [ ] Test A
- [ ] Test B

## Checklist:

- [X] Performed a self-review of my own code
- [ ] npm test passes on your machine
- [ ] New tests added or existing tests modified to cover all changes
- [ ] Code conforms with the style guide
- [ ] API Documentation in code was updated
- [ ] Any dependent changes have been merged and published in downstream
modules

---------

Co-authored-by: James Crowley <[email protected]>
  • Loading branch information
sadarunnisa-sf and James Crowley authored Apr 17, 2024
1 parent b354553 commit a647d56
Showing 1 changed file with 32 additions and 0 deletions.
32 changes: 32 additions & 0 deletions .github/workflows/snyk-security.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
---
name: snyk

on:
pull_request:
branches:
- main

jobs:
security:
runs-on: [self-hosted, linux, codebuild]
name: snyk
steps:
- name: checkout
uses: actions/checkout@v2
- name: Vulnerability scan
uses: snyk/actions/iac@master
with:
command: monitor
args: --severity-threshold=low

- name: Set up Node 16
uses: actions/setup-node@v3
with:
node-version: 16
- name: install Snyk CLI
run: npm install -g snyk
- uses: actions/checkout@master
- name: snyk monitor
run: snyk test --report
env:
SNYK_TOKEN: ${{ secrets.ARC_SNYK_TOKEN }}

0 comments on commit a647d56

Please sign in to comment.