diff --git a/.github/workflows/snyk_pr.yml b/.github/workflows/snyk_pr.yml deleted file mode 100644 index b4ef965334..0000000000 --- a/.github/workflows/snyk_pr.yml +++ /dev/null @@ -1,32 +0,0 @@ ---- -name: Clojure Snyk PR Check - -on: - pull_request_target: - types: [opened, reopened, synchronize, labeled] - -jobs: - snyk_clojure: - runs-on: ubuntu-latest - if: contains(github.event.pull_request.labels.*.name, 'safe to test') - steps: - - name: Connect to Twingate - uses: twingate/github-action@v1 - with: - service-key: ${{ secrets.TWINGATE_PUBLIC_REPO_KEY }} - - name: checkout the current PR - uses: actions/checkout@v2 - with: - fetch-depth: 1 - persist-credentials: false - - name: Run Clojure Snyk Scan - id: scan - uses: puppetlabs/security-snyk-clojure-action@v2 - with: - snykToken: ${{ secrets.SNYK_PE_TOKEN }} - snykOrg: 'puppet-enterprise' - snykProject: 'puppetserver' - snykPolicy: '.snyk' - - name: Check output - if: steps.scan.outputs.vulns != '' - run: echo "Vulnerabilities detected; ${{ steps.scan.outputs.vulns }}" && exit 1