Add Snyk to CI (#36)

segmentio · Jul 6, 2021 · 2fd51d0 · 2fd51d0
1 parent 6e78a5e
commit 2fd51d0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -21,6 +21,13 @@ jobs:
       - name: Install Dependencies
         run: yarn install --frozen-lockfile
 
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --severity-threshold=high --fail-on=upgradable
+
       - name: Lint
         run: yarn lint