From 6e07140b94afd0b084592b225c45872f86904d05 Mon Sep 17 00:00:00 2001 From: Steven Date: Mon, 1 Sep 2025 12:08:32 +0200 Subject: [PATCH] Update Snyk container workflow configuration --- .github/workflows/snyk-container.yml | 36 ++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 .github/workflows/snyk-container.yml diff --git a/.github/workflows/snyk-container.yml b/.github/workflows/snyk-container.yml new file mode 100644 index 0000000..e18bbe8 --- /dev/null +++ b/.github/workflows/snyk-container.yml @@ -0,0 +1,36 @@ +name: Snyk Container + +on: + push: + branches: [ "master" ] + pull_request: + branches: [ "master" ] + schedule: + - cron: '39 13 * * 4' + +permissions: + contents: read + +jobs: + snyk: + permissions: + contents: read + security-events: write + actions: read + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: Build a Docker image + run: docker build -t your/image-to-test . + - name: Run Snyk to check Docker image for vulnerabilities + continue-on-error: true + uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4 + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + image: burnett01/rsync-deployments + args: --file=Dockerfile + - name: Upload result to GitHub Code Scanning + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: snyk.sarif