Set up Snyk to manage vulns + dependency upgrades

TechRisersWomenGroupCodingSessions / loc-digital-garden

https://ladies-of-code-digital-garden.netlify.app/

2 stars 0 forks source link

Closed charlottebrf closed 2 years ago

charlottebrf commented 2 years ago

[x] Snyk CLI is set up so vulns are monitored
[x] Project should be tested daily and fix PRs opened by Snyk when there are vulns

charlottebrf commented 2 years ago

Questions:

How to add SNYK_TOKEN secret for github actions? Tried using the Github secrets UI but .... https://github.com/community/community/discussions/11941
How to get projects which are owned by another org to be scanned by Snyk
Should we be using CLI and set up a .snyk file?