add synk and veracode

renepollard · Apr 25, 2022 · 549c55d · 549c55d
1 parent 0cd5ff6
commit 549c55d
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/.github/workflows/cdis.yml b/.github/workflows/cdis.yml
@@ -30,6 +30,22 @@ jobs:
           containerfiles: |
            ./Dockerfile
 
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: monitor
+
+      - name: Veracode Upload And Scan
+        uses: veracode/[email protected]
+        with:
+          appname: '${{ secrets.appname }}'
+          createprofile: false
+          filepath: '$ {{ secrets.appath }}'
+          vid: '${{ secrets.API_ID }}'
+          vkey: '${{ secrets.API_KEY }}'
+
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with: