contentstack-ruby/.github/workflows/sca-scan.yml at development · contentstack/contentstack-ruby · GitHub

21 lines (21 loc) · 557 Bytes

name: Source Composition Analysis Scan

on:

pull_request:

types: [opened, synchronize, reopened]

jobs:

security-sca:

runs-on: ubuntu-latest

permissions:

contents: read

pull-requests: write

steps:

- uses: actions/checkout@master

- name: Run Snyk to check for vulnerabilities

uses: snyk/actions/ruby@master

env:

SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

with:

args: --fail-on=all

json: true

continue-on-error: true

- uses: contentstack/sca-policy@main

Expand file tree