From 01c48d42dc961691e2a7275fb9b0accd20fdbb39 Mon Sep 17 00:00:00 2001 From: Jenna Goldstrich Date: Tue, 14 Nov 2023 12:52:49 -0800 Subject: [PATCH] Remove Snyk --- .github/workflows/snyk.yml | 40 -------------------------------------- .snyk | 19 ------------------ 2 files changed, 59 deletions(-) delete mode 100644 .github/workflows/snyk.yml delete mode 100644 .snyk diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml deleted file mode 100644 index 735ab96..0000000 --- a/.github/workflows/snyk.yml +++ /dev/null @@ -1,40 +0,0 @@ ---- -name: "Security Scan: Snyk Code" - -on: - push: - -jobs: - snyk: - runs-on: ubuntu-latest - - permissions: - security-events: write - actions: read - contents: read - - strategy: - # see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstrategyfail-fast - fail-fast: false - - steps: - - name: Checkout Repository - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 - with: - fetch-depth: 1 - - # see https://github.com/snyk/actions/tree/master/node - - name: Lint Code with Snyk - uses: snyk/actions/node@b98d498629f1c368650224d6d212bf7dfa89e4bf # 0.4.0 - env: - # see https://github.com/snyk/actions#getting-your-snyk-token - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - # see https://github.com/snyk/actions/tree/master/node#uploading-snyk-scan-results-to-github-code-scanning - args: --policy-path=.snyk --sarif-file-output=snyk.sarif --org=${{ secrets.SNYK_ORG }} - - # see https://github.com/github/codeql-action/tree/main/upload-sarif - - name: Upload Snyk IaC results to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@e4262713b504983e61c7728f5452be240d9385a7 # codeql-bundle-v2.14.3 - with: - sarif_file: snyk.sarif diff --git a/.snyk b/.snyk deleted file mode 100644 index f02a7c2..0000000 --- a/.snyk +++ /dev/null @@ -1,19 +0,0 @@ -version: v1.25.0 - -# see https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/the-.snyk-file?q= -ignore: - # see https://security.snyk.io/vuln/snyk:lic:npm:hashicorp:js-releases:MPL-2.0] - 'snyk:lic:npm:hashicorp:js-releases:MPL-2.0': - - '@hashicorp/js-releases': - reason: acceptable license - expires: 2023-12-31T00:00:00.000Z - created: 2022-08-16T00:00:00.000Z - - # see https://security.snyk.io/vuln/snyk:lic:npm:openpgp:LGPL-3.0 - 'snyk:lic:npm:openpgp:LGPL-3.0': - - '@hashicorp/js-releases > openpgp': - reason: acceptable license - expires: 2023-12-31T00:00:00.000Z - created: 2022-08-16T00:00:00.000Z - -patch: {}