snyk-pr.yml

name: Run Snyk scan on PRs

on:
  pull_request:
    branches:
      - master**

jobs:
  monitor-baseline-project:
    uses: ./.github/workflows/snyk-push.yml
    with:
      github_ref: ${{ github.base_ref }}
    secrets: inherit

  scan-for-new-issues:
    runs-on: ubuntu-latest
    needs: monitor-baseline-project

    steps:
      - name: Setup Java
        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4
        with:
          distribution: 'temurin'
          java-version: |
            8
            11

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          path: mqtt-cli

      - name: Check for new issues
        uses: hivemq/hivemq-snyk-composite-action@ed15058181891d29fd10f0226f579c16188c0b20 # v2.2.1
        with:
          snyk-args: --org=hivemq-mqtt-cli --configuration-matching=^runtimeClasspath$ mqtt-cli -d
          snyk-token: ${{ secrets.SNYK_TOKEN }}