Merge pull request #339 from rstudio/snyk-integration-fix

Snyk integration fix
rstudio · Jan 17, 2023 · 98a403b · 98a403b
2 parents 46a1629 + efc5007
commit 98a403b
Showing 1 changed file with 21 additions and 2 deletions.
diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -9,15 +9,34 @@ env:
   SNYK_ORG: rstudio-connect
 
 jobs:
-  snyk-monitor:
+  python:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
 
+      - name: Install pipenv
+        run: |
+          python -m pip install --upgrade pipenv
+
+      - name: Install Pipfile dependencies (as required by Snyk)
+        run: pipenv install
+
       - name: Run Snyk
         uses: snyk/actions/python@master
         with:
           command: monitor
-          args: --file=Pipfile --org=${{ env.SNYK_ORG }}
+          args: --file=Pipfile --project-name=python --org=${{ env.SNYK_ORG }}
+  ui:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run Snyk
+        uses: snyk/actions/node@master
+        with:
+          command: monitor
+          args: --file=yarn.lock --project-name=ui --org=${{ env.SNYK_ORG }}