jenkins-x-securitychecks.yml

buildPack: none
pipelineConfig:
  pipelines:
    pullRequest:
      pipeline:
        agent:
          image: snyk/snyk:golang
        env:
        - name: SNYK_TOKEN
          valueFrom:
            secretKeyRef:
              name: snyk-token
              key: token
        stages:
        - name: pr-build-comment
          steps:
          - agent:
              image: gcr.io/jenkinsxio/builder-go:2.0.916-264
            dir: ci
            sh: "./add-pr-build-comment"
        - name: run-security-tests
          parallel:
          - name: run-operator-tests
            steps:
            - agent:
                image: snyk/snyk:golang
              dir: operator
              command: snyk
              args:
              - test
              - --all-projects
          - name: run-executor-tests
            steps:
            - agent:
                image: snyk/snyk:golang
              dir: executor
              command: snyk
              args:
              - test
              - --all-projects
          - name: run-python-tests
            steps:
            - agent:
                image: snyk/snyk:python-3.7
              dir: python
              sh: "make install && snyk test --file=setup.py"