open-source-test.yml

name: Snyk Open Source Test

on:
  workflow_dispatch:
  workflow_call:

  schedule:
           # ┌───────────── minute (0 - 59)
           # │ ┌───────────── hour (0 - 23)
           # │ │ ┌───────────── day of the month (1 - 31)
           # │ │ │ ┌───────────── month (1 - 12 or JAN-DEC)
           # │ │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT)
           # │ │ │ │ │
           # │ │ │ │ │
           # │ │ │ │ │
           # * * * * *
    - cron: '30 2 * * 1-5'

  push:
    branches:
      - 'main'

jobs:
  open-source-test:
    runs-on: ubuntu-latest
    steps:
        - name: Checkout Repo
          uses: actions/checkout@master

        - name: Test Open Source Dependencies with Snyk
          uses: snyk/actions/node@master
          env:
            SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
          with:
            command: test

        # - name: Upload SBOM
        #   uses: actions/upload-artifact@v3
        #   with:
        #     name: sbom-cyclonedx
        #     path: sbom-cyclonedx.json
        #     retention-days: 5