Merge pull request #10 from sirishgf/workflow-update-sec

Update firebase-publish.yml with snyk integration
sirishgf · Mar 29, 2024 · 4c44425 · 4c44425
2 parents 4324a7d + a965e5e
commit 4c44425
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/firebase-publish.yml b/.github/workflows/firebase-publish.yml
@@ -51,6 +51,12 @@ jobs:
         run: npx firebase-tools deploy --only functions --project ${{ vars.FIREBASE_PROJECT }} --debug
         env:
           GOOGLE_APPLICATION_CREDENTIALS: ${{ steps.auth.outputs.credentials_file_path }}
+
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/maven@master
+        continue-on-error: true
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}