Task 2.2: snyk

kolayne-IU-assignments · Feb 16, 2024 · bdec259 · bdec259
1 parent 702a149
commit bdec259
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 4 deletions.
diff --git a/.github/workflows/python-app.yml b/.github/workflows/python-app.yml
@@ -48,8 +48,18 @@ jobs:
         pytest
 
 
+  snyk:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/python-3.10@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+
+
   docker-build-push:
-    needs: [ lint-test ]
+    needs: [ lint-test, snyk ]
 
     runs-on: ubuntu-latest
 

diff --git a/app_python/README.md b/app_python/README.md
@@ -65,6 +65,6 @@ To run unit tests:
 ## CI
 
 On every push to the repository that changes files under `app_python/`,
-the code is linted and tested, on success, an image is built and published
-in DockerHub under the name `kolay0ne/app_py` with a tag matching the branch
-name.
+the code is linted and tested, and checked for vulnerabilities. On success,
+an image is built and published in DockerHub under the name `kolay0ne/app_py`
+with a tag matching the branch name.