diff --git a/.github/workflows/snyk-github-issue-creator.yml b/.github/workflows/snyk-github-issue-creator.yml new file mode 100644 index 0000000000..ad50eef0cc --- /dev/null +++ b/.github/workflows/snyk-github-issue-creator.yml @@ -0,0 +1,27 @@ +name: Create and Update Github Issues from Snyk report + +on: + [push, pull_request] + # workflow_dispatch: + # pull_request: + # schedule: + # - cron: '0 */4 * * *' # every 4 hours + +jobs: + sync: + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + + - name: Run Snyk to check for vulnerabilities + uses: snyk/actions/node@master + continue-on-error: + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + args: --yarn-workspaces --strict-out-of-sync=false + json: true + + - name: Run the Snyk Github Issue command + run: yarn ts-node scripts/snyk-github-issue-sync.ts