Skip to content

Commit

Permalink
Introduce Snyk security scan CircleCI workflow (#154)
Browse files Browse the repository at this point in the history
* Add default CCI templates

* Add snyk build steps

* Use the macOS runner for the CircleCI jobs

* Only run snyk on master

---------

Co-authored-by: Mike Nachbaur <mike.nachbaur@okta.com>
  • Loading branch information
eng-svc-terminus and mikenachbaur-okta authored Sep 5, 2023
1 parent 1aa3504 commit 327baa4
Showing 1 changed file with 45 additions and 0 deletions.
45 changes: 45 additions & 0 deletions .circleci/config.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,45 @@
version: 2.1

orbs:
platform-helpers-general: okta/general-platform-helpers@1.8.13

jobs:
build:
macos:
xcode: 14.2.0
steps:
- checkout
- run: |
swift build
- persist_to_workspace:
root: ~/project
paths:
- .

snyk-scan:
macos:
xcode: 14.2.0
steps:
- attach_workspace:
at: ~/project
- platform-helpers-general/step-load-dependencies
- platform-helpers-general/step-run-snyk-monitor:
scan-all-projects: true
skip-unresolved: false

workflows:
security-scan:
jobs:
- build:
filters:
branches:
only:
- master
- platform-helpers-general/job-snyk-prepare:
name: prepare-snyk
requires:
- build
- snyk-scan:
name: execute-snyk
requires:
- prepare-snyk

0 comments on commit 327baa4

Please sign in to comment.