From 395cd776714eed76419249f8dfe57e3638506c14 Mon Sep 17 00:00:00 2001 From: Johannes Edmeier Date: Fri, 15 Dec 2023 14:16:43 +0100 Subject: [PATCH] build: add snyk scans for release --- .github/workflows/ghcr-cleanup.yml | 2 +- .github/workflows/snyk.yml | 12 ++++++++++++ 2 files changed, 13 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/snyk.yml diff --git a/.github/workflows/ghcr-cleanup.yml b/.github/workflows/ghcr-cleanup.yml index 0a60f5e..2063c17 100644 --- a/.github/workflows/ghcr-cleanup.yml +++ b/.github/workflows/ghcr-cleanup.yml @@ -6,7 +6,7 @@ on: - cron: "0 8 * * 1" jobs: - extension-ci: + ghcr-cleanup: uses: steadybit/extension-kit/.github/workflows/reusable-ghcr-cleanup.yml@main secrets: token: ${{ secrets.GHCR_CLEANUP_PAT }} diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml new file mode 100644 index 0000000..f02de23 --- /dev/null +++ b/.github/workflows/snyk.yml @@ -0,0 +1,12 @@ +name: snyk-scan + +on: + workflow_dispatch: { } + schedule: + - cron: '0 6 * * 1-5' + +jobs: + snyk: + uses: steadybit/extension-kit/.github/workflows/reusable-snyk-scan.yml@main + secrets: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}