Create snyk-scan.yml

[jlind23]

Snyk github action will perform the tests and then results will be pushed to the Github security tab: https://github.com/elastic/elastic-agent/security

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2022-05-02T14:28:41.395+0000

• Duration: 17 min 58 sec

Test stats 🧪

Test	Results
Failed	0
Passed	3849
Skipped	21
Total	3870

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

• /package : Generate the packages.

• run integration tests : Run the Elastic Agent Integration tests.

• run end-to-end tests : Generate the packages and run the E2E Tests.

• run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	95.652% (66/69)	👍
Files	69.524% (146/210)	👍
Classes	69.194% (292/422)	👍
Methods	52.493% (800/1524)	👍
Lines	38.726% (8596/22197)	👍 0.009
Conditionals	100.0% (0/0)	💚

[mergify]

This pull request does not have a backport label. Could you fix it @jlind23? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-v./d./d./d is the label to automatically backport to the 8./d branch. /d is the digit

NOTE: backport-skip has been added to this pull request.

[ph]

@jlind23 This looks to work for me.

Testing /github/workspace...

Organization:      beats
Package manager:   gomodules
Target file:       go.mod
Project name:      github.com/elastic/elastic-agent
Open source:       no
Project path:      /github/workspace
Licenses:          enabled

✔ Tested 556 dependencies for known issues, no vulnerable paths found.

[ph]

@jlind23 We really need a better way to keep these things in sync for multiple repositories.

[jlind23]

@ph agree. @levinebw what would be the best way to setup snyk on multiple repositories without having to update the config in each one individually?

[ph]

@jlind23 I think robots might have existing tooling to do just that.

[levinebw]

Snyk github action will perform the tests and then results will be pushed to the Github security tab: https://github.com/elastic/elastic-agent/security

@jlind23 are you sure we are at a stage to push the Snky scan results to a public tab?

@levinebw what would be the best way to setup snyk on multiple repositories without having to update the config in each one individually?

I don't know... @jkakavas @thomheymann @jportner may have some thoughts; and/or you can raise a question to [email protected]

[jlind23]

@levinebw AFAIK code scanning alert is not publicly available, am i wrong?

[levinebw]

@levinebw AFAIK code scanning alert is not publicly available, am i wrong?

I see some content under the public security tab about the job, https://github.com/elastic/elastic-agent/runs/6258878535?check_suite_focus=true, I suppose you are right, the results are not getting pushed publicly