Task 2.2: snyk

kolayne-IU-assignments · Feb 16, 2024 · d622ada · d622ada
1 parent 702a149
commit d622ada
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 5 deletions.
diff --git a/.github/workflows/python-app.yml b/.github/workflows/python-app.yml
@@ -13,7 +13,7 @@ permissions:
   contents: read
 
 jobs:
-  lint-test:
+  lint-test-snyk:
 
     runs-on: ubuntu-latest
 
@@ -47,9 +47,16 @@ jobs:
       run: |
         pytest
 
+    - name: Check for vulnerabilities with Snyk
+      uses: snyk/actions/python-${{ matrix.python-version }}@master
+      with:
+        args: app_python/
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+
 
   docker-build-push:
-    needs: [ lint-test ]
+    needs: [ lint-test-snyk ]
 
     runs-on: ubuntu-latest
 

diff --git a/app_python/README.md b/app_python/README.md
@@ -65,6 +65,6 @@ To run unit tests:
 ## CI
 
 On every push to the repository that changes files under `app_python/`,
-the code is linted and tested, on success, an image is built and published
-in DockerHub under the name `kolay0ne/app_py` with a tag matching the branch
-name.
+the code is linted and tested, and checked for vulnerabilities. On success,
+an image is built and published in DockerHub under the name `kolay0ne/app_py`
+with a tag matching the branch name.