mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
Michael CrenshawandGitHub
4717ddf0bd
* chore: generate Snyk reports Signed-off-by: Michael Crenshaw <[email protected]> sarif Signed-off-by: Michael Crenshaw <[email protected]> dashboard Signed-off-by: Michael Crenshaw <[email protected]> cron job Signed-off-by: Michael Crenshaw <[email protected]> more consistent formatting Signed-off-by: Michael Crenshaw <[email protected]> clarification Signed-off-by: Michael Crenshaw <[email protected]> sarif files Signed-off-by: Michael Crenshaw <[email protected]> fix naming, fix doc get text Signed-off-by: Michael Crenshaw <[email protected]> apply suggestions Signed-off-by: Michael Crenshaw <[email protected]> apply suggestions Signed-off-by: Michael Crenshaw <[email protected]> blarn Signed-off-by: CI <[email protected]> ignore errors due to vulns Signed-off-by: CI <[email protected]> specify target branch in script Signed-off-by: CI <[email protected]> don't checkout before running script Signed-off-by: CI <[email protected]> make sure dest dir exists Signed-off-by: CI <[email protected]> fix workflow Signed-off-by: CI <[email protected]> * update scans Signed-off-by: CI <[email protected]> * update reports Signed-off-by: CI <[email protected]> * use latest ignore rules Signed-off-by: CI <[email protected]> * update reports Signed-off-by: CI <[email protected]> * update reports Signed-off-by: CI <[email protected]> * update reports, add link to latest, push to master instead of stable Signed-off-by: CI <[email protected]> * fix for double-digit patch versions Signed-off-by: CI <[email protected]> * clean up testing changes Signed-off-by: CI <[email protected]>
10 lines
593 B
Bash
Executable File
10 lines
593 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -e
|
|
set -o pipefail
|
|
|
|
# Fail on high-or-greater vulnerabilities.
|
|
snyk test --all-projects --exclude=docs,site,ui-test --org=argoproj --severity-threshold=high --policy-path=.snyk --sarif-file-output=/tmp/argocd-test.sarif
|
|
snyk iac test manifests/install.yaml --org=argoproj --severity-threshold=high --policy-path=.snyk --sarif-file-output=/tmp/argocd-iac-test-install.sarif
|
|
snyk iac test manifests/namespace-install.yaml --org=argoproj --severity-threshold=high --policy-path=.snyk --sarif-file-output=/tmp/argocd-iac-test-namespace-install.sarif
|