From c511f7d9356a73cb96e6ecd605736946dcfb6cbd Mon Sep 17 00:00:00 2001
From: Dan Brown <development@danb.me>
Date: Wed, 24 Jun 2026 13:48:20 +0100
Subject: [PATCH] CI: Added workflow to sync with snyk

---
 .forgejo/workflows/update-snyk.yml | 35 ++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 .forgejo/workflows/update-snyk.yml

diff --git a/.forgejo/workflows/update-snyk.yml b/.forgejo/workflows/update-snyk.yml
new file mode 100644
index 000000000..64df65b54
--- /dev/null
+++ b/.forgejo/workflows/update-snyk.yml
@@ -0,0 +1,35 @@
+name: update-snyk
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - 'composer*'
+      - 'package*'
+    branches:
+      - 'development'
+      - 'release'
+
+jobs:
+  update:
+    runs-on: docker
+    container:
+      image: docker.io/library/node:24-trixie
+    steps:
+    - uses: https://code.forgejo.org/actions/checkout@v6
+
+    - name: Update Snyk for monitoring - Composer
+      uses: https://github.com/snyk/actions/node@master
+      env:
+        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      with:
+        command: monitor
+        args: --file=composer.lock --project-name=bookstack-${{forgejo.ref_name}}-composer
+
+    - name: Update Snyk for monitoring - NPM
+      uses: https://github.com/snyk/actions/node@master
+      env:
+        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      with:
+        command: monitor
+        args: --file=package-lock.json --project-name=bookstack-${{forgejo.ref_name}}-npm
\ No newline at end of file