-
Notifications
You must be signed in to change notification settings - Fork 23
39 lines (33 loc) · 855 Bytes
/
snyk.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
name: Snyk test
on:
pull_request:
branches:
- master
jobs:
security:
runs-on: ubuntu-latest
defaults:
run:
working-directory: java-sdk
steps:
- uses: actions/checkout@v3
- uses: snyk/actions/setup@master
with:
snyk-version: v1.1032.0
- uses: actions/setup-java@v3
with:
distribution: temurin
java-version: 17
- name: Setup Gradle
uses: gradle/gradle-build-action@v2
- name: Run Snyk to check for vulnerabilities
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
run: >
snyk test
--all-sub-projects
--configuration-matching='^runtimeClasspath$'
--org=radar-base
--policy-path=.snyk
--json-file-output=snyk.json
--severity-threshold=high