mirror of
https://bitbucket.org/atlassian/dc-deployments-automation.git
synced 2025-12-14 00:43:06 -06:00
Add running of Snyk againsts runtime dependencies.
This commit is contained in:
@@ -43,3 +43,14 @@ pipelines:
|
|||||||
- cd roles/{{ spath.parts[2] }}
|
- cd roles/{{ spath.parts[2] }}
|
||||||
- pipenv run molecule test -s {{ spath.parts[4] }}
|
- pipenv run molecule test -s {{ spath.parts[4] }}
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
|
|
||||||
|
- step:
|
||||||
|
name: Run Snyk security scan
|
||||||
|
services:
|
||||||
|
- docker
|
||||||
|
script:
|
||||||
|
- ./bin/install-ansible --dev
|
||||||
|
- apt-get update && apt-get install -y npm
|
||||||
|
- npm install -g snyk
|
||||||
|
- snyk auth $SNYK_TOKEN
|
||||||
|
- pipenv run snyk test --severity-threshold=high
|
||||||
|
|||||||
Reference in New Issue
Block a user