chore: add snyk_token to yml

ali-sdk · Sep 5, 2023 · a208d03 · a208d03
1 parent 7e49b7c
commit a208d03
Show file tree

Hide file tree

Showing 6 changed files with 13 additions and 18 deletions.
diff --git a/.github/workflows/codeCov.yml b/.github/workflows/codeCov.yml
@@ -23,6 +23,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     steps:
       - uses: actions/checkout@v2
       - name: test and report upload

diff --git a/.github/workflows/dev_node_test.yml b/.github/workflows/dev_node_test.yml
@@ -25,15 +25,13 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [14.x]
 
     steps:
       - uses: actions/checkout@v2
-        with:
-          ref: develop
       - name: browser build and test
         run: |
           curl cip.cc
@@ -56,16 +54,14 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [10.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
       - uses: actions/checkout@v2
-        with:
-          ref: develop
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v2
         with:
@@ -89,16 +85,14 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [12.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
       - uses: actions/checkout@v2
-        with:
-          ref: develop
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v2
         with:
@@ -122,7 +116,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [14.x]

diff --git a/.github/workflows/master_node_test.yml b/.github/workflows/master_node_test.yml
@@ -25,7 +25,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [14.x]
@@ -54,7 +54,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [10.x]
@@ -85,7 +85,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [12.x]
@@ -116,7 +116,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [14.x]

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -14,6 +14,7 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.GIT_TOKEN }} # semantic-release和create-pull-request.js需要
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }} # 只有semantic-release需要
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     steps:
       - name: Checkout
         uses: actions/checkout@v2

diff --git a/.github/workflows/schedule.yml b/.github/workflows/schedule.yml
@@ -20,7 +20,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
-
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     strategy:
       matrix:
         node-version: [14.x]

diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -10,11 +10,10 @@ jobs:
   security:
     environment: ali_oss_AK
     runs-on: ubuntu-latest
+    env:
+      SNYK_TOKEN: ${{ secrets.SNYK_KEY }}
     steps:
       - uses: actions/checkout@v2
-
       - run: npm install
       - name: Run Snyk to check for vulnerabilities
         uses: snyk/actions/node@master
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_KEY }}