BRAVO-666 - Added snyk monitor check to normal build

EliLillyCo · Jun 15, 2020 · a178e59 · a178e59
1 parent 0796332
commit a178e59
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -20,6 +20,14 @@ jobs:
  with:
  java-version: 11
 
+ - name: Run Snyk to check for vulnerabilities
+ uses: snyk/actions/gradle-jdk11@master
+ env:
+ SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+ with:
+ args: --severity-threshold=high
+ command: monitor
+
  - name: Gradle Build
  uses: eskatos/gradle-command-action@v1
  with: