Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

automate snyk branch monitoring #2258

Open
orouz opened this issue Jun 4, 2024 · 0 comments
Open

automate snyk branch monitoring #2258

orouz opened this issue Jun 4, 2024 · 0 comments
Assignees
Labels
automation Team:Cloud Security Cloud Security team related

Comments

@orouz
Copy link
Collaborator

orouz commented Jun 4, 2024

Motivation
we always monitor main and latest release branch, so every release we need to add the new release branch to the monitored projects on snyk. we can automate this with a workflow whenever a new release branch is created

example of adding main as a monitored branch:

curl -X POST \
  https://api.snyk.io/v1/org/orgId/integrations/integrationId/import \
  -H 'Content-Type: application/json; charset=utf-8' \
  -H 'Authorization: token API_KEY' \
  -d '{
  "target": {
    "owner": "elastic",
    "name": "cloudbeat",
    "branch": "main"
  },
  "exclusionGlobs": "deploy, scripts, tests, security-policies"
}'

we also need to figure out one of the following:

  1. how to delete a branch (previous release), so we can just add the new release branch
  2. how to delete the entire repo, so we can re-add main and the new release branch

Definition of done

  • snyk always monitors main and latest-release branch

Related

@orouz orouz added Team:Cloud Security Cloud Security team related automation labels Jun 4, 2024
@orouz orouz self-assigned this Jun 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automation Team:Cloud Security Cloud Security team related
Projects
None yet
Development

No branches or pull requests

1 participant