Codigo con Snyk

Victormnn · Sep 9, 2024 · 2f97adc · 2f97adc
1 parent daf3122
commit 2f97adc
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
@@ -87,3 +87,13 @@ jobs:
       - name: Check Status
         if: ${{ env.SONAR_STATUS == 'ERROR' }}
         run: exit 1
+  security_snyk:
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Run Snyk to check Docker image for vulnerabilities
+        uses: snyk/actions/docker@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest