Chore: check shasum when installing snyk cli on our workflow #7
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Example workflow using Snyk | |
| on: push | |
| jobs: | |
| snyk_scan: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v2 | |
| - name: Install Snyk CLI | |
| run: | | |
| curl https://static.snyk.io/cli/latest/snyk-linux -o snyk | |
| curl https://static.snyk.io/cli/latest/snyk-linux.sha256 -o snyk.sha256 | |
| sha256sum -c snyk.sha256 | |
| chmod +x snyk | |
| sudo mv snyk /usr/local/bin/ | |
| - name: Authenticate Snyk CLI | |
| run: | | |
| snyk auth ${{ secrets.SNYK_TOKEN }} | |
| - name: Run Snyk to test project dependencies | |
| run: | | |
| snyk test |