Snyk Workflow add (#62902)

* Snyk Workflow add

* CODEOWNERS update

* Remove master branch name
This commit is contained in:
Ethan 2023-02-23 14:16:16 +01:00 committed by GitHub
parent 16b416b88b
commit 71b7c62021
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 0 deletions

1
.github/CODEOWNERS vendored
View File

@ -600,6 +600,7 @@ embed.go @grafana/grafana-as-code
/.github/workflows/scripts/pr-get-job-link.js @grafana/plugins-platform-frontend
/.github/workflows/stale.yml @grafana/user-essentials
/.github/workflows/update-changelog.yml @grafana/grafana-release-eng
/.github/workflows/snyk.yml @grafana/security-team
# Conf

14
.github/workflows/snyk.yml vendored Normal file
View File

@ -0,0 +1,14 @@
name: Snyk Monitor Scanning
on:
release:
types: [published]
push:
branches:
- 'main'
workflow_dispatch:
jobs:
snyk-scan-ci:
uses: 'grafana/security-github-actions/.github/workflows/snyk_monitor.yml@main'
secrets:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}