-
Notifications
You must be signed in to change notification settings - Fork 0
57 lines (48 loc) · 1.27 KB
/
pull-request.yml
File metadata and controls
57 lines (48 loc) · 1.27 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
name: Pull Request
on:
pull_request:
branches: [master, release]
jobs:
scan-code:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Snyk code scan
uses: snyk/actions/node@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_API_KEY }}
with:
command: code test --all-sub-projects --severity-threshold=medium
scan-deps:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Snyk dependency scan
uses: snyk/actions/node@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_API_KEY }}
with:
args: --all-sub-projects --severity-threshold=high
verify:
runs-on: ${{ matrix.os }}
strategy:
matrix:
node: ["20.x"]
os: [ubuntu-latest]
env:
CI: 1
steps:
- name: Checkout repo
uses: actions/checkout@v2
- name: Use Node ${{ matrix.node }}
uses: actions/setup-node@v1
with:
node-version: ${{ matrix.node }}
- name: Install deps (with cache)
uses: bahmutov/npm-install@v1
with:
install-command: yarn --immutable --no-progress --ignore-scripts
- name: Verify
run: make verify