From 48bd2e2be206e76db903f7ded79dbcfca31d80b5 Mon Sep 17 00:00:00 2001
From: Harry Hogg <hhogg@spotify.com>
Date: Fri, 22 Oct 2021 14:57:02 +0100
Subject: [PATCH] chore(Snyk): Added workflow for outputting the Snyk report as
 JSON

Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-Authored-By: Himanshu Mishra <himanshu@orkohunter.net
---
 .../workflows/snyk-github-issue-creator.yml   | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 .github/workflows/snyk-github-issue-creator.yml

diff --git a/.github/workflows/snyk-github-issue-creator.yml b/.github/workflows/snyk-github-issue-creator.yml
new file mode 100644
index 0000000000..ad50eef0cc
--- /dev/null
+++ b/.github/workflows/snyk-github-issue-creator.yml
@@ -0,0 +1,27 @@
+name: Create and Update Github Issues from Snyk report
+
+on:
+  [push, pull_request]
+  # workflow_dispatch:
+  # pull_request:
+  # schedule:
+  #   - cron: '0 */4 * * *' # every 4 hours
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        continue-on-error:
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --yarn-workspaces --strict-out-of-sync=false
+          json: true
+
+      - name: Run the Snyk Github Issue command
+        run: yarn ts-node scripts/snyk-github-issue-sync.ts