feat: add prodsec/security_scans

snyk · May 27, 2024 · f2af7c2 · f2af7c2
1 parent 8a20680
commit f2af7c2
Showing 1 changed file with 22 additions and 2 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -1,8 +1,20 @@
 version: 2.1
 
 orbs:
-  prodsec: snyk/[email protected]
-
+  prodsec: snyk/prodsec-orb@1
+
+jobs:
+  security-scans:
+    resource_class: small
+    docker:
+      - image: circleci/openjdk:11-jdk-stretch
+    steps:
+      - checkout
+      - prodsec/security_scans:
+          mode: auto
+          open-source-additional-arguments: --exclude=snyk-sdk-tests
+          iac-scan: disabled
+
 workflows:
   version: 2
   CICD:
@@ -12,3 +24,11 @@ workflows:
           context:
             - snyk-bot-slack
           channel: os-team-managed-alerts
+          filters:
+            branches:
+              ignore:
+                - main
+
+      - security-scans:
+          name: Security Scans
+          context: open_source-managed