/live-snyk-scans

Workflow for running daily snyk scans of artifacts running in aws-prod environment

Primary LanguageShell

A CI workflow to run snyk scans of the Docker images running in cyber-dojo's aws-beta and aws-prod runtime environments.
Reports newly found snyk vulnerabilities to a dedicated Kosli Flow.
Run's weekly at 09:00 on Saturday and on git pushes to main.

When new vulnerabilities are found you can use the script/print_all_base_images.sh script to help locate where, in the base image hierarchy, the vulnerabilities have been found.