diff --git a/.github/workflows/snyk-monitor.yml b/.github/workflows/snyk-monitor.yml new file mode 100644 index 00000000000..f323915a258 --- /dev/null +++ b/.github/workflows/snyk-monitor.yml @@ -0,0 +1,16 @@ +name: Check for critical vulnerabilities +on: push +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + - name: Run Snyk monitor to check for vulnerabilities + id: check_vuln + uses: snyk/actions/node@master + continue-on-error: true + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + command: monitor + args: --severity-threshold=critical diff --git a/README.md b/README.md index 59b2aba12ad..56965f2df13 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # Goof - Snyk's vulnerable demo app [![Known Vulnerabilities](https://snyk.io/test/github/snyk/goof/badge.svg?style=flat-square)](https://snyk.io/test/github/snyk/goof) -A vulnerable Node.js demo application, based on the [Dreamers Lab tutorial](http://dreamerslab.com/blog/en/write-a-todo-list-with-express-and-mongodb/). +A vulnerable Node.js demo application, based on the [Dreamers Lab tutorial](http://dreamerslab.com/blog/en/write-a-todo-list-with-express-and-mongodb/) ## Features