diff --git a/.circleci/config.yml b/.circleci/config.yml index 62be6fe..31c3b0e 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -80,6 +80,17 @@ jobs: --commit $CIRCLE_SHA1 \ --build-env "circleci" \ --suppress_output + snyk-scan: + docker: + - image: cimg/openjdk:17.0.6 + steps: + - checkout + - run: ./mvnw clean install -Pci -Dlicense.skip=true -Dmaven.test.skip.exec=true + - general-platform-helpers/step-run-snyk-monitor: + scan-all-projects: true + skip-unresolved: false + run-on-non-main: true + additional-arguments: "--maven-aggregate-project" workflows: build_and_test: @@ -89,10 +100,23 @@ workflows: - jdk21 semgrep: jobs: + - jdk17 - platform-helpers/job-semgrep-scan: name: "Scan with Semgrep" context: - static-analysis + - snyk-scan: + name: execute-snyk + requires: + - jdk17 + filters: + branches: + only: + - master + - main + - OKTA-802778 + context: + - static-analysis "Malware Scanner": jobs: - reversing-labs: