snyk - Pipeline Components

The image is for running snyk, snyk is installed in /app/ in case you need to customize the install before usage. This requires a local available docker service like dind or a shared docker socket, docker is installed in this container.

Examples

snyk:
  stage: linting
  variables:
    SNYK_TOKEN: my-secret-snyk-token
  image: registry.gitlab.com/pipeline-components/snyk:latest
  script:
    - snyk test --docker pipelinecomponents/php-linter:latest --file=Dockerfile

For this example:

pipelinecomponents/php-linter:latest is the container to scan, and should be localy available
SNYK_TOKEN should be set as a secret variable in gitlab