Add centralized Snyk security scanning #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

smartinellibenedetti merged 1 commit into master from snyk-scan

Sep 18, 2025

Contributor

fdevans commented Sep 16, 2025

This PR adds the centralized Snyk security scanning workflow to enable automated vulnerability detection.

Changes

Added .github/workflows/snyk-scan.yml workflow
Configured to run on push and pull requests to main/master branches
Uses the reusable workflow from rundeck-plugins/.github repository

Benefits

Automated security vulnerability scanning
Consistent security configuration across all plugins
Early detection of security issues

Testing

The workflow will be triggered automatically on:

Push to main/master branches
Pull requests to main/master branches
Manual workflow dispatch

Dependencies

Requires SNYK_TOKEN and SNYK_ORG_ID secrets to be configured in the repository


          Adding centralized Snyk Scanning

b547692

smartinellibenedetti approved these changes

View reviewed changes

smartinellibenedetti merged commit 8bd0f5c into master

3 of 4 checks passed

smartinellibenedetti deleted the snyk-scan branch

September 18, 2025 19:25

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet