Implement SNYK blocking and report

podaac · Aug 3, 2023 · 705bad8 · 705bad8
1 parent d51dc3b
commit 705bad8
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/.github/workflows/deploy-generate.yml b/.github/workflows/deploy-generate.yml
@@ -46,6 +46,30 @@ jobs:
 
       # Check out GitHub repo
       - uses: actions/checkout@v3
+
+      # SNYK blocking
+      - name: Run Snyk as a blocking step
+        uses: snyk/actions/python-3.8@master
+        env:
+            SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: test
+          args: >
+              --org=${{ secrets.SNYK_ORG_ID }}
+              --project-name=${{ github.repository }}
+              --severity-threshold=high
+              --fail-on=all
+
+      # SNYK report
+      - name: Run Snyk on Python
+        uses: snyk/actions/python-3.8@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: monitor
+          args: >
+            --org=${{ secrets.SNYK_ORG_ID }}
+            --project-name=${{ github.repository }}
       
       # Set up Terraform
       - name: Setup Terraform