2021-01-22 12:17:15 -06:00
|
|
|
# Copyright 2020-2021 Signal Messenger, LLC
|
2020-10-30 15:34:04 -05:00
|
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
|
|
2020-05-05 14:18:27 -07:00
|
|
|
name: Snyk
|
|
|
|
|
on:
|
|
|
|
|
schedule:
|
2020-05-07 13:51:50 -07:00
|
|
|
- cron: '0 12 * * *'
|
2020-05-05 14:18:27 -07:00
|
|
|
|
|
|
|
|
jobs:
|
|
|
|
|
snyk:
|
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
|
if: github.repository != 'signalapp/Signal-Desktop'
|
|
|
|
|
|
|
|
|
|
steps:
|
|
|
|
|
- run: lsb_release -a
|
|
|
|
|
- run: uname -a
|
2021-02-05 00:00:02 +01:00
|
|
|
- uses: actions/checkout@v2
|
|
|
|
|
- uses: actions/setup-node@v2
|
2020-05-05 14:18:27 -07:00
|
|
|
with:
|
2021-04-02 17:29:14 -07:00
|
|
|
node-version: '14.16.0'
|
2021-04-05 13:37:23 -07:00
|
|
|
- run: npm install -g yarn@1.22.10
|
2020-05-05 14:18:27 -07:00
|
|
|
- run: npm install -g snyk@1.316.1
|
|
|
|
|
|
|
|
|
|
- run: yarn install --frozen-lockfile
|
|
|
|
|
- run: snyk auth "$SNYK_TOKEN"
|
|
|
|
|
env:
|
|
|
|
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
|
|
|
|
- run: snyk test --show-vulnerable-paths=all
|
