@@ -23,28 +23,28 @@ jobs:
2323 - name : Checkout code
2424 uses : actions/checkout@v7
2525
26+ - name : Run Snyk to check for vulnerabilities
27+ uses : snyk/actions/node@v1.0.0
28+ env :
29+ SNYK_TOKEN : ${{ secrets.SNYK_API_TOKEN }}
30+ with :
31+ # Fail the build on high severity vulnerabilities
32+ args : --severity-threshold=high
33+
2634 - name : Run Snyk Monitor
2735 # Only monitor on main branch pushes and releases, not on PRs
28- # Temporarily comment out to check if this command will run after
29- # if: github.event_name != 'pull_request' && github.event_name != 'merge_group'
36+ if : github.event_name != 'pull_request' && github.event_name != 'merge_group'
3037 uses : snyk/actions/node@v1.0.0
3138 env :
3239 SNYK_TOKEN : ${{ secrets.SNYK_API_TOKEN }}
3340 with :
3441 command : monitor
3542 args : >
36- -- --org=${{ secrets.SNYK_ORG_ID }}
43+ --
3744 --all-projects
45+ --target-reference=${{ github.ref_name }}
3846 --project-environment=external
3947 --project-lifecycle=development
4048 --project-business-criticality=low
4149 --project-tags=team=team-se-cloud-automation,ticket-creation=true
4250 --exclude=node_modules
43-
44- - name : Run Snyk to check for vulnerabilities
45- uses : snyk/actions/node@v1.0.0
46- env :
47- SNYK_TOKEN : ${{ secrets.SNYK_API_TOKEN }}
48- with :
49- # Fail the build on high severity vulnerabilities
50- args : --severity-threshold=high
0 commit comments