snyk

snyk #64

	name: snyk
	on:
	schedule:
	- cron: "0 10 * * 1" # Monday @ 10am UTC
	workflow_dispatch:

	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	SNYK_ORG: rstudio-connect

	jobs:
	snyk-monitor:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	with:
	fetch-depth: 0

	# - name: Run Snyk (setup.py)
	# uses: snyk/actions/python@master
	# with:
	# command: monitor
	# args: --file=setup.py --package-manager=pip --project-name=setup.py --org=${{ env.SNYK_ORG }}

	# - name: Run Snyk (requirements.txt)
	# uses: snyk/actions/python@master
	# with:
	# command: monitor
	# args: --file=requirements.txt --package-manager=pip --project-name=requirements.txt --org=${{ env.SNYK_ORG }}

	# On Oct 2 2023, the steps using snyk/actions/python@master started failing with "undefined".
	# Nothing obvious changed in our code or in the Snyk action or Docker image.
	# Setting up and running snyk generically seems to work, so we'll go with that.
	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: '3.11'
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements.txt

	- uses: snyk/actions/setup@master

	- name: Run Snyk (requirements.txt)
	run: snyk monitor --file="requirements.txt" --package-manager=pip --project-name="requirements.txt" --org=${{ env.SNYK_ORG }}

Provide feedback