Merge pull request #1903 from iotaledger/develop-legacy #2361
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test Golang dependencies with Snyk | |
| on: | |
| push: | |
| branches: [legacy, develop-legacy] | |
| pull_request: | |
| branches: [legacy, develop-legacy] | |
| jobs: | |
| security: | |
| # Only run on push events or PRs from iotaledger/hornet, skip on PRs from forks | |
| # Secret variables cannot be exposed to PRs from forks | |
| if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v2 | |
| - name: Run Snyk to check for vulnerabilities | |
| uses: snyk/actions/golang@0.1.1 | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| with: | |
| args: --org=iotaledger |