Skip to content

Commit

Permalink
Snyk Security Scan integration
Browse files Browse the repository at this point in the history
Signed-off-by: Bonface Shisakha Asunga <[email protected]>
  • Loading branch information
bonfaceshisakha committed Nov 14, 2022
1 parent 1c72a77 commit 1fb9cfb
Showing 1 changed file with 8 additions and 3 deletions.
11 changes: 8 additions & 3 deletions .github/workflows/snyk-security-scan.yml
Original file line number Diff line number Diff line change
@@ -1,16 +1,21 @@
name: Snyk Security Scan GitHub Actions
on:
push:
- master
- develop
branches:
- master
- develop
pull-request:
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Install SDK
run: echo "y" | sudo ${ANDROID_HOME}/tools/bin/sdkmanager --install "ndk;21.0.6113669" --sdk_root=${ANDROID_SDK_ROOT}
- name: Grant execute permission for gradlew
run: chmod +x gradlew
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/gradle@master
uses: snyk/actions/gradle-jdk11@master
continue-on-error: true # To make sure that SARIF upload gets called
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
Expand Down

0 comments on commit 1fb9cfb

Please sign in to comment.