ci(workflow): add snyk step

rudemex · Jan 17, 2024 · cda60fd · cda60fd
1 parent 3d5af89
commit cda60fd
Show file tree

Hide file tree

Showing 5 changed files with 25 additions and 0 deletions.
diff --git a/.github/workflows/branches.yml b/.github/workflows/branches.yml
@@ -99,3 +99,8 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
+      - name: "🦠 Snyk to check for vulnerabilities"
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
diff --git a/.github/workflows/develop.yml b/.github/workflows/develop.yml
@@ -106,6 +106,11 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
+      - name: "🦠 Snyk to check for vulnerabilities"
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+
       - name: "🐳 Docker"
         run: |
           docker login -u ${DOCKER_USER} -p ${DOCKER_PASSWORD}

diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
@@ -106,6 +106,11 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
+      - name: "🦠 Snyk to check for vulnerabilities"
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+
       - name: "🐳 Docker"
         run: |
           docker login -u ${DOCKER_USER} -p ${DOCKER_PASSWORD}

diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -100,3 +100,8 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
+      - name: "🦠 Snyk to check for vulnerabilities"
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -113,6 +113,11 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
+      - name: "🦠 Snyk to check for vulnerabilities"
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+
       - name: "🏷️ Create Release"
         id: Release
         run: |