snyk #11206

	name: snyk

	"on":
	push:
	branches: [main, dev]
	pull_request:
	branches: [main, dev]
	# You can use the merge_group event to trigger your GitHub Actions workflow when
	# a pull request is added to a merge queue
	# https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/managing-a-merge-queue#triggering-merge-group-checks-with-github-actions
	merge_group:

	jobs:
	security-scan:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	- uses: actions/setup-python@v4
	with:
	python-version: "3.11.4"
	cache: "pip"
	cache-dependency-path: engine/requirements.txt
	- uses: actions/setup-node@v3
	with:
	node-version: 18.16.0
	cache: "yarn"
	cache-dependency-path: grafana-plugin/yarn.lock
	- uses: snyk/actions/setup@master
	- name: Install backend dependencies
	working-directory: engine
	run: pip install -r requirements.txt
	- name: Install frontend dependencies
	working-directory: grafana-plugin
	run: yarn install --frozen-lockfile --prefer-offline --network-timeout 500000
	- name: Run Snyk
	continue-on-error: true
	run: snyk monitor --all-projects --severity-threshold=high
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

Provide feedback