snyk-cli-scan.yml

name: 🔬 Snyk cli SCA

on: 
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
  workflow_dispatch:  

env:
  SNYK_SEVERITY_THRESHOLD_LEVEL: high

jobs:
  snyk-cli-scan:
    runs-on: ubuntu-latest
    if: ${{ false }} # temporarily disabled
    steps:
      - name: Git checkout
        uses: actions/checkout@v2

      - name: prepare for snyk scan
        uses: datastax/shared-github-actions/actions/snyk-prepare@main

      - name: snyk scan go
        uses: datastax/shared-github-actions/actions/snyk-scan-go@main
        with:
          go-version: 1.17
          directories: .
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
          SNYK_ORG_ID: ${{ secrets.SNYK_ORG_ID }}
          serivce_gh_token: ${{ secrets.GB_TOKEN }}

      - name: Snyk scan result
        uses: datastax/shared-github-actions/actions/snyk-process-scan-results@main
        with:
          gh_repo_token: ${{ secrets.GITHUB_TOKEN }}
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
          SNYK_ORG_ID: ${{ secrets.SNYK_ORG_ID }}