mirror of
				https://github.com/Burnett01/rsync-deployments.git
				synced 2025-11-04 09:29:04 +01:00 
			
		
		
		
	Update Snyk container workflow configuration
This commit is contained in:
		
							parent
							
								
									51bdd07760
								
							
						
					
					
						commit
						6e07140b94
					
				
					 1 changed files with 36 additions and 0 deletions
				
			
		
							
								
								
									
										36
									
								
								.github/workflows/snyk-container.yml
									
									
									
									
										vendored
									
									
										Normal file
									
								
							
							
						
						
									
										36
									
								
								.github/workflows/snyk-container.yml
									
									
									
									
										vendored
									
									
										Normal file
									
								
							| 
						 | 
				
			
			@ -0,0 +1,36 @@
 | 
			
		|||
name: Snyk Container
 | 
			
		||||
 | 
			
		||||
on:
 | 
			
		||||
  push:
 | 
			
		||||
    branches: [ "master" ]
 | 
			
		||||
  pull_request:
 | 
			
		||||
    branches: [ "master" ]
 | 
			
		||||
  schedule:
 | 
			
		||||
    - cron: '39 13 * * 4'
 | 
			
		||||
 | 
			
		||||
permissions:
 | 
			
		||||
  contents: read
 | 
			
		||||
 | 
			
		||||
jobs:
 | 
			
		||||
  snyk:
 | 
			
		||||
    permissions:
 | 
			
		||||
      contents: read
 | 
			
		||||
      security-events: write
 | 
			
		||||
      actions: read
 | 
			
		||||
    runs-on: ubuntu-latest
 | 
			
		||||
    steps:
 | 
			
		||||
    - uses: actions/checkout@v4
 | 
			
		||||
    - name: Build a Docker image
 | 
			
		||||
      run: docker build -t your/image-to-test .
 | 
			
		||||
    - name: Run Snyk to check Docker image for vulnerabilities
 | 
			
		||||
      continue-on-error: true
 | 
			
		||||
      uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4
 | 
			
		||||
      env:
 | 
			
		||||
        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
 | 
			
		||||
      with:
 | 
			
		||||
        image: burnett01/rsync-deployments
 | 
			
		||||
        args: --file=Dockerfile
 | 
			
		||||
    - name: Upload result to GitHub Code Scanning
 | 
			
		||||
      uses: github/codeql-action/upload-sarif@v3
 | 
			
		||||
      with:
 | 
			
		||||
        sarif_file: snyk.sarif
 | 
			
		||||
		Loading…
	
		Reference in a new issue