snyk-scan.yml

name: Snyk vulnerability scan
on:
  workflow_dispatch:
  schedule:
    - cron: '0 1 * * *'
  push:
    branches:
      - main
jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@master

      - uses: snyk/actions/gradle@master
        with:
          command: monitor
          args: --all-projects --exclude=k8s -d --severity-threshold=high --remote-repo-url=leanix/vsm-sbom-booster --project-tags=Team=Cider
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}