Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

CI - Add Snyk Scanning#1800

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Open
dealako wants to merge1 commit intoAcademySoftwareFoundation:master
base:master
Choose a base branch
Loading
fromdealako:feature/ci-snyk-scan

Conversation

@dealako
Copy link

@dealakodealako commentedApr 26, 2024
edited
Loading

This PR introduces a CI job to periodically scan the OpenVDB repository
for security vulernatiblities. This CI job requires coordination with
John Mertic (@jmertic) and/or the OpenVDB maintainers to add both the
SNYK_ORG andSNYK_TOKEN GitHub secrets to the GitHub configuration.
Once these serets are added, then this PR can be merged with the
appropriate review/approvals. The Snyk tool can be run on the command
line at any time using:

snyk auth${SNYK_TOKEN}Your account has been authenticated. Snyk is now ready to be used.snyktest --unmanaged --org=${SNYK_ORG}Testing /Users/ddeal/projects/go/src/github.com/dealako/openvdb...Tested 1 dependencyfor known issues, found 0 issues.snyk monitor --unmanaged --org=${SNYK_ORG}Monitoring /Users/ddeal/projects/go/src/github.com/dealako/openvdb (openvdb)...Explore this snapshot at https://app.snyk.io/...Notifications about newly disclosed issues related to these dependencies will be emailed to you.

Contact John Mertic (@jmertic) to access the above secrets or to gain
access to the Snyk console.

Signed-off-by: David Dealddeal@linuxfoundation.org

@linux-foundation-easycla
Copy link

linux-foundation-easyclabot commentedApr 26, 2024
edited
Loading

CLA Signed

The committers listed above are authorized under a signed CLA.

  • ✅ login: dealako / name: David Deal (79758df)

This PR introduces a CI job to periodically scan the OpenVDB repositoryfor security vulernatiblities. This CI job requires coordination withJohn Mertic (jmertic) and/or the OpenVDB maintainers to add both the`SNYK_ORG` and `SNYK_TOKEN` GitHub secrets to the GitHub configuration.Once these serets are added, then this PR can be merged with theappropriate review/approvals. The Snyk tool can be run on the commandline at any time using:```bashsnyk auth ${SNYK_TOKEN}Your account has been authenticated. Snyk is now ready to be used.snyk test --unmanaged --org=${SNYK_ORG}Testing /Users/ddeal/projects/go/src/github.com/dealako/openvdb...Tested 1 dependency for known issues, found 0 issues.snyk monitor --unmanaged --org=${SNYK_ORG}Monitoring /Users/ddeal/projects/go/src/github.com/dealako/openvdb (openvdb)...Explore this snapshot athttps://app.snyk.io/org/openvdb/project/${SNY_ORG}/history/4c82fd74-757b-40f3-8522-803ae4f84e0fNotifications about newly disclosed issues related to these dependencies will be emailed to you.```Contact John Mertic (jmertic) to access the above secrets or to gainaccess to the Snyk console.Signed-off-by: David Deal <ddeal@linuxfoundation.org>
@dealako
Copy link
Author

@jmertic - I requested EasyCLA corporate contributor authorization. You are listed as one of the CLA managers. :-)

Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

@kmusethkmusethAwaiting requested review from kmusethkmuseth is a code owner

@apradhanaapradhanaAwaiting requested review from apradhanaapradhana is a code owner

@jmlaitjmlaitAwaiting requested review from jmlaitjmlait is a code owner

@IdclipIdclipAwaiting requested review from IdclipIdclip is a code owner

@danrbaileydanrbaileyAwaiting requested review from danrbaileydanrbailey is a code owner

@richhonesrichhonesAwaiting requested review from richhonesrichhones is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dealako

[8]ページ先頭

©2009-2025 Movatter.jp