From 2bf371dc640cca92d53adee0f8437bd76327f7d7 Mon Sep 17 00:00:00 2001 From: Blake Kizer <69515410+bkizer-tenable@users.noreply.github.com> Date: Wed, 20 Apr 2022 15:04:35 -0400 Subject: [PATCH] Add dep scan (#1223) * Create Security.yml * Add Security Scanning workflow * update command Removing the all projects option --- .github/workflows/Security.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/workflows/Security.yml diff --git a/.github/workflows/Security.yml b/.github/workflows/Security.yml new file mode 100644 index 000000000..b0c536d7b --- /dev/null +++ b/.github/workflows/Security.yml @@ -0,0 +1,15 @@ +name: Dependency Scanning +on: push +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + - uses: snyk/actions/setup@master + - uses: actions/setup-go@v1 + with: + go-version: '1.17' + - name: Go Dependency Scanning + run: snyk monitor --severity-threshold=high + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} \ No newline at end of file