diff --git a/.github/workflows/deploy-generate.yml b/.github/workflows/deploy-generate.yml index 3681047..2eb1bf6 100644 --- a/.github/workflows/deploy-generate.yml +++ b/.github/workflows/deploy-generate.yml @@ -46,6 +46,30 @@ jobs: # Check out GitHub repo - uses: actions/checkout@v3 + + # SNYK blocking + - name: Run Snyk as a blocking step + uses: snyk/actions/python-3.8@master + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + command: test + args: > + --org=${{ secrets.SNYK_ORG_ID }} + --project-name=${{ github.repository }} + --severity-threshold=high + --fail-on=all + + # SNYK report + - name: Run Snyk on Python + uses: snyk/actions/python-3.8@master + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + command: monitor + args: > + --org=${{ secrets.SNYK_ORG_ID }} + --project-name=${{ github.repository }} # Set up Terraform - name: Setup Terraform