Added trigger for Google Cloud Build #36
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,42 @@ | ||
| # You can find the Snyk Official CLI container images here: https://github.com/snyk/cli#snyk-cli-in-a-docker-image | ||
| steps: | ||
| - name: 'snyk/snyk-cli:npm' | ||
| args: | ||
| - '-c' | ||
| - |- | ||
| snyk config set api=${_SNYK_TOKEN} | ||
| snyk test --json-file-output=results-open-source.html || true | ||
|
There was a problem hiding this comment. On the file output: this line (and L16, L24, L32) do not produce the expected output. Please add a On the return code: Unfortunately GCB does not support something like Which shows the developer our approach for exiting with 0 by default, but showing them how to enable the security gate again. There was a problem hiding this comment. I've checked in the wrong codes previously hence the confusion. Changes made. |
||
| id: Snyk Open Source test | ||
| entrypoint: bash | ||
| - name: 'snyk/snyk-cli:npm' | ||
| args: | ||
| - '-c' | ||
| - |- | ||
| snyk config set api=${_SNYK_TOKEN} | ||
| snyk code test --sarif-file-output=results-code.html || true | ||
| id: Snyk Code test | ||
| entrypoint: bash | ||
| - name: 'snyk/snyk-cli:npm' | ||
| args: | ||
| - '-c' | ||
| - |- | ||
| snyk config set api=${_SNYK_TOKEN} | ||
| snyk iac test <TERRAFORM FILE> --json-file-output=results-iac.html || true | ||
| id: Snyk IaC test | ||
| entrypoint: bash | ||
| - name: 'snyk/snyk-cli:npm' | ||
| args: | ||
| - '-c' | ||
| - |- | ||
| snyk config set api=${_SNYK_TOKEN} | ||
| snyk container test <CONTAINER_IMAGE> --json-file-output=results-container.html || true | ||
|
There was a problem hiding this comment. please add the |
||
| id: Snyk Container test | ||
| entrypoint: bash | ||
| artifacts: | ||
| objects: | ||
| location: 'gs://<STORE_NAME>/scan_output' | ||
|
There was a problem hiding this comment. I'm not familiar with GCB here, but is There was a problem hiding this comment. It's ok, I've removed this output folder on Google Cloud Storage. I will just store all in the root directory of the storage. All good. There was a problem hiding this comment. STORE_NAME seems to be a required variable. Please explain the requirement on the top of file as well. |
||
| paths: | ||
| - results-open-source.html | ||
| - results-code.html | ||
| - results-iac.html | ||
| - results-container.html | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please add a line or two of comments on the top of the file similar to other recently updated file to explain what is being shown in the file.