mirror of
https://github.com/signalapp/Signal-Desktop.git
synced 2026-02-24 11:47:59 +00:00
Update several dependencies, remove a few as well
This commit is contained in:
28
.github/workflows/snyk.yml
vendored
28
.github/workflows/snyk.yml
vendored
@@ -1,28 +0,0 @@
|
||||
# Copyright 2020-2021 Signal Messenger, LLC
|
||||
# SPDX-License-Identifier: AGPL-3.0-only
|
||||
|
||||
name: Snyk
|
||||
on:
|
||||
schedule:
|
||||
- cron: '0 12 * * *'
|
||||
|
||||
jobs:
|
||||
snyk:
|
||||
runs-on: ubuntu-latest
|
||||
if: github.repository != 'signalapp/Signal-Desktop'
|
||||
|
||||
steps:
|
||||
- run: lsb_release -a
|
||||
- run: uname -a
|
||||
- uses: actions/checkout@v2
|
||||
- uses: actions/setup-node@v2
|
||||
with:
|
||||
node-version: '16.5.0'
|
||||
- run: npm install -g yarn@1.22.10
|
||||
- run: npm install -g snyk@1.316.1
|
||||
|
||||
- run: yarn install --frozen-lockfile
|
||||
- run: snyk auth "$SNYK_TOKEN"
|
||||
env:
|
||||
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||
- run: snyk test --show-vulnerable-paths=all
|
||||
Reference in New Issue
Block a user