|
|
@ -15,12 +15,12 @@ name: Snyk Container |
|
|
|
|
|
|
|
on: |
|
|
|
push: |
|
|
|
branches: [ "main" ] |
|
|
|
branches: ["main"] |
|
|
|
pull_request: |
|
|
|
# The branches below must be a subset of the branches above |
|
|
|
branches: [ "main" ] |
|
|
|
branches: ["main"] |
|
|
|
schedule: |
|
|
|
- cron: '45 1 * * 4' |
|
|
|
- cron: "45 1 * * 4" |
|
|
|
|
|
|
|
permissions: |
|
|
|
contents: read |
|
|
@ -30,26 +30,26 @@ jobs: |
|
|
|
permissions: |
|
|
|
contents: read # for actions/checkout to fetch code |
|
|
|
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results |
|
|
|
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status |
|
|
|
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status |
|
|
|
runs-on: ubuntu-latest |
|
|
|
steps: |
|
|
|
- uses: actions/checkout@v3 |
|
|
|
- name: Build a Docker image |
|
|
|
run: docker build -t gameservermanagers/steamcmd . |
|
|
|
- name: Run Snyk to check Docker image for vulnerabilities |
|
|
|
# Snyk can be used to break the build when it detects vulnerabilities. |
|
|
|
# In this case we want to upload the issues to GitHub Code Scanning |
|
|
|
continue-on-error: true |
|
|
|
uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4 |
|
|
|
env: |
|
|
|
# In order to use the Snyk Action you will need to have a Snyk API token. |
|
|
|
# More details in https://github.com/snyk/actions#getting-your-snyk-token |
|
|
|
# or you can signup for free at https://snyk.io/login |
|
|
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} |
|
|
|
with: |
|
|
|
image: gameservermanagers/steamcmd |
|
|
|
args: --file=Dockerfile |
|
|
|
- name: Upload result to GitHub Code Scanning |
|
|
|
uses: github/codeql-action/upload-sarif@v2 |
|
|
|
with: |
|
|
|
sarif_file: snyk.sarif |
|
|
|
- uses: actions/checkout@v3 |
|
|
|
- name: Build a Docker image |
|
|
|
run: docker build -t gameservermanagers/steamcmd . |
|
|
|
- name: Run Snyk to check Docker image for vulnerabilities |
|
|
|
# Snyk can be used to break the build when it detects vulnerabilities. |
|
|
|
# In this case we want to upload the issues to GitHub Code Scanning |
|
|
|
continue-on-error: true |
|
|
|
uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4 |
|
|
|
env: |
|
|
|
# In order to use the Snyk Action you will need to have a Snyk API token. |
|
|
|
# More details in https://github.com/snyk/actions#getting-your-snyk-token |
|
|
|
# or you can signup for free at https://snyk.io/login |
|
|
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} |
|
|
|
with: |
|
|
|
image: gameservermanagers/steamcmd |
|
|
|
args: --file=Dockerfile |
|
|
|
- name: Upload result to GitHub Code Scanning |
|
|
|
uses: github/codeql-action/upload-sarif@v2 |
|
|
|
with: |
|
|
|
sarif_file: snyk.sarif |
|
|
|