buildspec-snyk-scan.yml

version: 0.2

env:
  #variables:
     # key: "value"
     # key: "value"
  parameter-store:
     SNYK_AUTH_TOKEN: "snykAuthToken"
     # key: "value"
  #secrets-manager:
     # key: secret-id:json-key:version-stage:version-id
     # key: secret-id:json-key:version-stage:version-id
  #exported-variables:
     # - variable
     # - variable
  #git-credential-helper: yes
#batch:
  #fast-fail: true
  #build-list:
  #build-matrix:
  #build-graph:
phases:
  install:
    #Se você usar a imagem padrão do Ubuntu 2.0 ou posterior, você deve especificar as versões de tempo de execução.
    #Se você especificar versões de tempo de execução e usar uma imagem que não seja a imagem padrão do Ubuntu 2.0, a compilação falhará.
    runtime-versions:
      python: 3.8
      # name: version
    commands:
      - pip install -r requirements.txt
      #- command
  #pre_build:
    #commands:
      # - command
      # - command
  build:
    commands:
      - curl -Lo ./snyk "https://github.com/snyk/snyk/releases/download/v1.210.0/snyk-linux"
      - chmod -R +x ./snyk
      #Auth set through environment variable
      - ./snyk auth ${SNYK_AUTH_TOKEN}
      - ./snyk monitor
      # - ./snyk test #--severity-threshold=medium
  #post_build:
    #commands:
      # - command
      # - command
#reports:
  #report-name-or-arn:
    #files:
      # - location
      # - location
    #base-directory: location
    #discard-paths: yes
    #file-format: JunitXml | CucumberJson
#artifacts:
  #files:
    # - location
    # - location
  #name: $(date +%Y-%m-%d)
  #discard-paths: yes
  #base-directory: location
#cache:
  #paths:
    # - paths