snyk.yml

name: Snyk

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main, develop]
  schedule:
    - cron: '0 6 * * 5'

jobs:
  security:
    name: Security
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
      - name: Snyk Test
        uses: snyk/actions@0.3.0
        continue-on-error: true
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          args: --yarn-workspaces --sarif-file-output=snyk.sarif
      - name: Snyk Monitor
        uses: snyk/actions@0.3.0
        continue-on-error: true
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          command: monitor
          args: --yarn-workspaces
      - name: Upload result
        uses: github/codeql-action/upload-sarif@v2
        with:
          sarif_file: snyk.sarif