Add running of Snyk againsts runtime dependencies.

This commit is contained in:
Steve Smith
2021-03-02 15:05:09 +11:00
parent fd0dae49da
commit d9e02990af

View File

@@ -43,3 +43,14 @@ pipelines:
- cd roles/{{ spath.parts[2] }}
- pipenv run molecule test -s {{ spath.parts[4] }}
{% endfor %}
- step:
name: Run Snyk security scan
services:
- docker
script:
- ./bin/install-ansible --dev
- apt-get update && apt-get install -y npm
- npm install -g snyk
- snyk auth $SNYK_TOKEN
- pipenv run snyk test --severity-threshold=high