diff --git a/.circleci/config.yml b/.circleci/config.yml index 7269639..f66f6f6 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,8 +1,21 @@ version: 2.1 orbs: - prodsec: snyk/prodsec-orb@1.0 - + prodsec: snyk/prodsec-orb@1 + +jobs: + security-scans: + resource_class: small + docker: + - image: cimg/openjdk:17.0 + steps: + - checkout + - prodsec/security_scans: + mode: auto + open-source-scan-all-projects: false + open-source-additional-arguments: --file=pom.xml --maven-aggregate-project + iac-scan: disabled + workflows: version: 2 CICD: @@ -12,3 +25,11 @@ workflows: context: - snyk-bot-slack channel: os-team-managed-alerts + filters: + branches: + ignore: + - main + + - security-scans: + name: Security Scans + context: open_source-managed