mirror of
https://bitbucket.org/atlassian/dc-deployments-automation.git
synced 2025-12-13 16:33:08 -06:00
Add running of Snyk againsts runtime dependencies.
This commit is contained in:
@@ -43,3 +43,14 @@ pipelines:
|
||||
- cd roles/{{ spath.parts[2] }}
|
||||
- pipenv run molecule test -s {{ spath.parts[4] }}
|
||||
{% endfor %}
|
||||
|
||||
- step:
|
||||
name: Run Snyk security scan
|
||||
services:
|
||||
- docker
|
||||
script:
|
||||
- ./bin/install-ansible --dev
|
||||
- apt-get update && apt-get install -y npm
|
||||
- npm install -g snyk
|
||||
- snyk auth $SNYK_TOKEN
|
||||
- pipenv run snyk test --severity-threshold=high
|
||||
|
||||
Reference in New Issue
Block a user