Skip to content

Commit 70c693b

Browse files
Add snyk vulnerability checks through CircleCI (#47)
# Description <!-- A brief description of what the PR does/changes. Use active voice and present tense, e.g., This commit fixes ... --> This PR adds snyk vulnerability checks through CircleCI workflow instead of pushing the snyk reports from local machine. # DevRev issue <!-- A DevRev issue link (https://app.devrev.ai/devrev/works/ISS-00000) or `no-work-item`. Only dependency updates don't need a work item, all others should have one. --> https://app.devrev.ai/devrev/works/ISS-194882 # Documentation PR <!-- A link to the PR in fern-api-docs if relevant, otherwise `no-docs`. Any new feature should link to a PR in https://github.com/devrev/fern-api-docs. Dependency updates or changes to the configuration that are not user-facing do not require an update to the documentation. --> no-docs
1 parent 33115ad commit 70c693b

File tree

3 files changed

+551
-452
lines changed

3 files changed

+551
-452
lines changed

.circleci/config.yml

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
version: 2.1
2+
3+
jobs:
4+
build_and_security:
5+
docker:
6+
- image: cimg/node:20.19
7+
working_directory: ~/project/code
8+
steps:
9+
- checkout:
10+
path: ~/project
11+
12+
- run:
13+
name: Install dependencies
14+
command: npm ci
15+
16+
- run:
17+
name: Build project
18+
command: npm run build
19+
20+
- run:
21+
name: Run Snyk dependency vulnerability scan
22+
command: |
23+
npx snyk auth $SNYK_TOKEN
24+
npx snyk monitor --all-projects
25+
26+
workflows:
27+
version: 2
28+
security_pipeline:
29+
jobs:
30+
- build_and_security:
31+
context:
32+
- snyk-integration
33+
filters:
34+
branches:
35+
only: main

0 commit comments

Comments
 (0)