mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-07-15 21:31:36 +03:00
CI: Added workflow to sync with snyk
This commit is contained in:
35
.forgejo/workflows/update-snyk.yml
Normal file
35
.forgejo/workflows/update-snyk.yml
Normal file
@@ -0,0 +1,35 @@
|
||||
name: update-snyk
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
push:
|
||||
paths:
|
||||
- 'composer*'
|
||||
- 'package*'
|
||||
branches:
|
||||
- 'development'
|
||||
- 'release'
|
||||
|
||||
jobs:
|
||||
update:
|
||||
runs-on: docker
|
||||
container:
|
||||
image: docker.io/library/node:24-trixie
|
||||
steps:
|
||||
- uses: https://code.forgejo.org/actions/checkout@v6
|
||||
|
||||
- name: Update Snyk for monitoring - Composer
|
||||
uses: https://github.com/snyk/actions/node@master
|
||||
env:
|
||||
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||
with:
|
||||
command: monitor
|
||||
args: --file=composer.lock --project-name=bookstack-${{forgejo.ref_name}}-composer
|
||||
|
||||
- name: Update Snyk for monitoring - NPM
|
||||
uses: https://github.com/snyk/actions/node@master
|
||||
env:
|
||||
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||
with:
|
||||
command: monitor
|
||||
args: --file=package-lock.json --project-name=bookstack-${{forgejo.ref_name}}-npm
|
||||
Reference in New Issue
Block a user