Update Snyk container workflow configuration

This commit is contained in:
Steven 2025-09-01 12:08:32 +02:00 committed by GitHub
parent 51bdd07760
commit 6e07140b94
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

36
.github/workflows/snyk-container.yml vendored Normal file
View file

@ -0,0 +1,36 @@
name: Snyk Container
on:
push:
branches: [ "master" ]
pull_request:
branches: [ "master" ]
schedule:
- cron: '39 13 * * 4'
permissions:
contents: read
jobs:
snyk:
permissions:
contents: read
security-events: write
actions: read
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Build a Docker image
run: docker build -t your/image-to-test .
- name: Run Snyk to check Docker image for vulnerabilities
continue-on-error: true
uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: burnett01/rsync-deployments
args: --file=Dockerfile
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: snyk.sarif