You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
recyclarr/.github/workflows/snyk.yml

62 lines
1.5 KiB

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Snyk
on:
push:
paths:
- .github/workflows/snyk.yml
- "**.cs"
- "**.props"
- "**.sln"
- "**.csproj"
pull_request:
paths:
- .github/workflows/snyk.yml
- "**.cs"
- "**.props"
- "**.sln"
- "**.csproj"
jobs:
snyk:
name: Snyk
runs-on: ubuntu-latest
steps:
- name: Get Source Code
uses: actions/checkout@v3
with:
fetch-depth: 0 # avoid shallow clone for GitVersion
- name: dotnet restore
run: dotnet restore src
# No central package management support?
# https://github.com/snyk/snyk-nuget-plugin/issues/103
- name: Snyk Test
uses: snyk/actions/dotnet@master
continue-on-error: true
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: >
--file=src/Recyclarr.sln
--sarif-file-output=snyk.sarif
--project-name=recyclarr
- name: Snyk Monitor
uses: snyk/actions/dotnet@master
continue-on-error: true
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: monitor
args: >
--file=src/Recyclarr.sln
--project-name=recyclarr
- name: Publish to Github CS
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: snyk.sarif
category: snyk