snyk.yml

name: snyk
on:
  schedule:
    - cron: "0 10 * * 1" # Monday @ 10am UTC
  workflow_dispatch:
  push:
    paths:
      - pyproject.toml
      - '.github/workflows/snyk.yml'

env:
  SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
  SNYK_ORG: posit-connect-tools

jobs:
  snyk-monitor:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up uv and Python
        uses: astral-sh/setup-uv@v6
        with:
          python-version: '3.11'
          activate-environment: true

      - name: Prepare requirements.txt
        run: |
          uv pip compile pyproject.toml --output-file requirements.txt
          uv pip install -r requirements.txt

      - uses: snyk/actions/setup@master

      - name: Run Snyk (requirements.txt)
        run: snyk monitor --file="requirements.txt" --package-manager=pip --project-name="requirements.txt" --org=${{ env.SNYK_ORG }}