contentstack-dotnet/.github/workflows/sca-scan.yml at development · contentstack/contentstack-dotnet

23 lines (23 loc) · 679 Bytes

name: Source Composition Analysis Scan

on:

pull_request:

types: [opened, synchronize, reopened]

jobs:

security-sca:

runs-on: ubuntu-latest

steps:

- name: Checkout repository

uses: actions/checkout@master

- name: Setup .NET Core @ Latest

uses: actions/setup-dotnet@v1

with:

dotnet-version: "7.0.x"

- name: Run Dotnet Restore

run: |

dotnet restore

- name: Run Snyk to check for vulnerabilities

uses: snyk/actions/dotnet@master

env:

SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

with:

args: --file=Contentstack.Core/obj/project.assets.json --fail-on=all

Provide feedback