Merge pull request #336 from rstudio/snyk-integration

Add Snyk github action
rstudio · Jan 12, 2023 · 46a1629 · 46a1629
2 parents a775dbf + 3abe062
commit 46a1629
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -0,0 +1,23 @@
+name: snyk
+on:
+  schedule:
+    - cron: "0 10 * * 1" # Monday @ 10am UTC
+  workflow_dispatch:
+
+env:
+  SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+  SNYK_ORG: rstudio-connect
+
+jobs:
+  snyk-monitor:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run Snyk
+        uses: snyk/actions/python@master
+        with:
+          command: monitor
+          args: --file=Pipfile --org=${{ env.SNYK_ORG }}