From 33271a7f4aa1c18e86f96dfab95bc99856991321 Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Thu, 9 Sep 2021 18:26:59 +0200 Subject: [PATCH] github/workflows: add snyk monitoring workflow Signed-off-by: Patrik Oldsberg --- .github/workflows/snyk-monitor.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/snyk-monitor.yml diff --git a/.github/workflows/snyk-monitor.yml b/.github/workflows/snyk-monitor.yml new file mode 100644 index 0000000000..5c6f5b722d --- /dev/null +++ b/.github/workflows/snyk-monitor.yml @@ -0,0 +1,29 @@ +name: Snyk Monitoring + +on: + workflow_dispatch: + push: + branches: [master] + paths: + - '.snyk' + - '.github/workflows/snyk-monitor.yml' + - '**/package.json' + - 'yarn.lock' + +jobs: + sync: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - name: Monitor and Synchronize Snyk Policies + uses: snyk/actions/node@master + with: + command: monitor + args: > + --yarn-workspaces + --policy-path=.snyk + --org=backstage-dgh + --strict-out-of-sync=false + --remote-repo-url=https://github.com/backstage/backstage + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}