External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-09 23:12:06 -03:30
Code Issues Packages Projects Releases Wiki Activity

Update Snyk Workflow to target other branches (#20602)

Browse Source 
Closes #20364

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
This commit is contained in:
Bruno Oliveira da Silva 2023-06-01 04:03:12 -03:00 committed by GitHub
parent f546e28306
commit 24bc76b3f3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
.github/workflows/snyk-analysis.yml vendored
View File

@ -1,8 +1,6 @@
name: Snyk
on:
schedule:
- cron: 0 0 * * *
on:
workflow_dispatch:
defaults:
@ -16,20 +14,20 @@ jobs:
if: github.repository == 'keycloak/keycloak'
steps:
- uses: actions/checkout@v3
- name: Build Keycloak
uses: ./.github/actions/build-keycloak
- uses: snyk/actions/setup@master
- name: Check for vulnerabilities in Quarkus
run: snyk test --policy-path=${GITHUB_WORKSPACE}/.github/snyk/.snyk --all-projects --prune-repeated-subdependencies --exclude=tests --sarif-file-output=quarkus-report.sarif quarkus
run: snyk test --policy-path=${GITHUB_WORKSPACE}/.github/snyk/.snyk --all-projects --prune-repeated-subdependencies --exclude=tests --sarif-file-output=quarkus-report.sarif quarkus/deployment
continue-on-error: true
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
- name: Upload Quarkus scanner results to GitHub
uses: github/codeql-action/upload-sarif@v2.2.12
uses: github/codeql-action/upload-sarif@v2.3.3
with:
sarif_file: quarkus-report.sarif
category: snyk-quarkus-report
@ -43,7 +41,7 @@ jobs:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
- name: Upload Operator scanner results to GitHub
uses: github/codeql-action/upload-sarif@v2.2.12
uses: github/codeql-action/upload-sarif@v2.3.3
with:
sarif_file: operator-report.sarif
category: snyk-operator-report