SNOW-1886206 Implement encryption with FLOE #568
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Snyk Scan | |
| on: | |
| pull_request: | |
| branches: | |
| - master | |
| schedule: | |
| - cron: '0 6 * * 1' | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| pull-requests: read | |
| jobs: | |
| detect-changes: | |
| name: Detect Changed Files | |
| if: github.event_name == 'pull_request' | |
| runs-on: ubuntu-latest | |
| outputs: | |
| any-pom: ${{ steps.changes.outputs.any-pom }} | |
| parent-pom: ${{ steps.changes.outputs.parent-pom }} | |
| public-pom: ${{ steps.changes.outputs.public-pom }} | |
| thin-public-pom: ${{ steps.changes.outputs.thin-public-pom }} | |
| fips-public-pom: ${{ steps.changes.outputs.fips-public-pom }} | |
| steps: | |
| - uses: dorny/paths-filter@v3 | |
| id: changes | |
| with: | |
| filters: | | |
| any-pom: | |
| - '**/pom.xml' | |
| parent-pom: | |
| - 'parent-pom.xml' | |
| public-pom: | |
| - 'public_pom.xml' | |
| thin-public-pom: | |
| - 'thin_public_pom.xml' | |
| fips-public-pom: | |
| - 'FIPS/public_pom.xml' | |
| snyk-aggregate-test: | |
| name: Snyk Aggregate Project Test | |
| needs: detect-changes | |
| if: needs.detect-changes.outputs.any-pom == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Run Snyk aggregate project test | |
| uses: snyk/actions/maven@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| SNYK_CFG_ORG: ${{ secrets.SNYK_ORG_ID }} | |
| MAVEN_OPTS: -DskipTests -Dmaven.test.skip=true -Dmaven.main.skip=true | |
| with: | |
| args: --maven-aggregate-project --all-projects --policy-path=.snyk | |
| command: test | |
| snyk-parent-pom-test: | |
| name: Snyk Parent POM Test | |
| needs: detect-changes | |
| if: needs.detect-changes.outputs.parent-pom == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Run Snyk parent-pom test | |
| uses: snyk/actions/maven@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| SNYK_CFG_ORG: ${{ secrets.SNYK_ORG_ID }} | |
| MAVEN_OPTS: -DskipTests -Dmaven.test.skip=true -Dmaven.main.skip=true | |
| with: | |
| args: --file=parent-pom.xml --package-manager=maven | |
| command: test | |
| snyk-public-pom-test: | |
| name: Snyk Public POM Test | |
| needs: detect-changes | |
| if: needs.detect-changes.outputs.public-pom == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Run Snyk public-pom test | |
| uses: snyk/actions/maven@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| SNYK_CFG_ORG: ${{ secrets.SNYK_ORG_ID }} | |
| MAVEN_OPTS: -DskipTests -Dmaven.test.skip=true -Dmaven.main.skip=true | |
| with: | |
| args: --file=public_pom.xml --package-manager=maven | |
| command: test | |
| snyk-thin-public-pom-test: | |
| name: Snyk Thin Public POM Test | |
| needs: detect-changes | |
| if: needs.detect-changes.outputs.thin-public-pom == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Run Snyk thin-public-pom test | |
| uses: snyk/actions/maven@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| SNYK_CFG_ORG: ${{ secrets.SNYK_ORG_ID }} | |
| MAVEN_OPTS: -DskipTests -Dmaven.test.skip=true -Dmaven.main.skip=true | |
| with: | |
| args: --file=thin_public_pom.xml --package-manager=maven | |
| command: test | |
| snyk-fips-public-pom-test: | |
| name: Snyk FIPS Public POM Test | |
| needs: detect-changes | |
| if: needs.detect-changes.outputs.fips-public-pom == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Run Snyk FIPS public-pom test | |
| uses: snyk/actions/maven@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| SNYK_CFG_ORG: ${{ secrets.SNYK_ORG_ID }} | |
| MAVEN_OPTS: -DskipTests -Dmaven.test.skip=true -Dmaven.main.skip=true | |
| with: | |
| args: --file=FIPS/public_pom.xml --package-manager=maven | |
| command: test | |
| snyk-monitor: | |
| name: Snyk Monitor (${{ matrix.pom }}) | |
| if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| pom: | |
| - pom.xml | |
| - parent-pom.xml | |
| - public_pom.xml | |
| - thin_public_pom.xml | |
| - FIPS/pom.xml | |
| - FIPS/public_pom.xml | |
| - fat-jar-test-app/pom.xml | |
| - ci/wif/aws-lambda/pom.xml | |
| - ci/wif/azure-function/pom.xml | |
| - ci/wif/gcp-function/pom.xml | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Snyk monitor ${{ matrix.pom }} | |
| uses: snyk/actions/maven@master | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| SNYK_CFG_ORG: ${{ secrets.SNYK_ORG_ID }} | |
| MAVEN_OPTS: -DskipTests -Dmaven.test.skip=true -Dmaven.main.skip=true | |
| with: | |
| args: --file=${{ matrix.pom }} --package-manager=maven --policy-path=.snyk --project-name=${{ matrix.pom }} --remote-repo-url=https://github.com/snowflakedb/snowflake-jdbc | |
| command: monitor |