github.com/argoproj/argo-cd/v2@v2.10.9/hack/snyk-non-container-tests.sh (about)

     1  #!/usr/bin/env bash
     2  
     3  set -e
     4  set -o pipefail
     5  
     6  # Fail on high-or-greater vulnerabilities.
     7  snyk test --all-projects --exclude=docs,site,ui-test --org=argoproj --severity-threshold=high --policy-path=.snyk --sarif-file-output=/tmp/argocd-test.sarif
     8  snyk iac test manifests/install.yaml                 --org=argoproj --severity-threshold=high --policy-path=.snyk --sarif-file-output=/tmp/argocd-iac-test-install.sarif
     9  snyk iac test manifests/namespace-install.yaml       --org=argoproj --severity-threshold=high --policy-path=.snyk --sarif-file-output=/tmp/argocd-iac-test-namespace-install.sarif