Merge pull request #76 from Financial-Times/snyk-scanning

Snyk production scanning
Financial-Times · Feb 15, 2021 · 5f904a8 · 5f904a8
2 parents 713185b + d70fb7d
commit 5f904a8
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -97,6 +97,7 @@ workflows:
       - test:
           requires:
             - build
+      #Scan package.json for vulnerable dependencies while developing
       - ft-snyk-orb/scan-js-packages:
           context: rel-eng-creds
           requires:
@@ -108,6 +109,14 @@ workflows:
           requires:
             - test
             - ft-snyk-orb/scan-js-packages
+      #Scan and monitor vulnerabilities once in production
+      - ft-snyk-orb/scan-and-monitor-js-packages:
+          name: snyk-scan-and-monitor
+          context: rel-eng-creds
+          requires:
+            - publish
+          filters:
+            <<: *filters_version_tag
 
 experimental:
   notify: