From 16c3eeb6ed9c05e3e7163477352b4e51a63d5c3e Mon Sep 17 00:00:00 2001 From: Manmohan Shaw Date: Fri, 22 Aug 2025 12:34:59 +0530 Subject: [PATCH 1/3] Update config.yml --- .circleci/config.yml | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index c231d0a..629cd85 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -22,11 +22,27 @@ jobs: root: . paths: - . - + snyk-scan: + docker: + - image: cimg/python:3.10 + steps: + - attach_workspace: # Allows for sharing of build-workspace (containing downloaded dependencies) (optional) + at: ~/project # This is the working directory for CCI containers, change if necessary + - checkout # Might not need this if you have "persist_to_workspace" and "attach_workspace" + - run: | # Might not need this if you have "persist_to_workspace" and "attach_workspace" + pip install -r requirements.txt + - platform-helpers-general/step-run-snyk-monitor: + scan-all-projects: true + skip-unresolved: false + run-on-non-main: true workflows: "Malware Scanner": jobs: - build + - snyk-scan: + context: + - static-analysis + name: execute-snyk - platform-helpers/job-reversinglabs-scan: context: - static-analysis From 18c02d05ea6816b47ffbe341438d7281f42fc1df Mon Sep 17 00:00:00 2001 From: Manmohan Shaw Date: Fri, 22 Aug 2025 13:05:03 +0530 Subject: [PATCH 2/3] Enable on non-master branch for testing --- .circleci/config.yml | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 629cd85..8473cc2 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -31,20 +31,28 @@ jobs: - checkout # Might not need this if you have "persist_to_workspace" and "attach_workspace" - run: | # Might not need this if you have "persist_to_workspace" and "attach_workspace" pip install -r requirements.txt + - platform-helpers-general/step-load-dependencies - platform-helpers-general/step-run-snyk-monitor: scan-all-projects: true skip-unresolved: false run-on-non-main: true + workflows: "Malware Scanner": jobs: - build - - snyk-scan: - context: - - static-analysis - name: execute-snyk - platform-helpers/job-reversinglabs-scan: context: - static-analysis requires: - build + - snyk-scan: + name: execute-snyk + requires: + - prepare-snyk + filters: + branches: + only: + - master + - main + - Integrate-Snyk-SAST-Scans From 9dc54ca0285dd2a84d2f238c9767435dbcdfcb71 Mon Sep 17 00:00:00 2001 From: Manmohan Shaw Date: Sat, 23 Aug 2025 08:40:00 +0530 Subject: [PATCH 3/3] Update config.yml --- .circleci/config.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 8473cc2..100121b 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -48,11 +48,8 @@ workflows: - build - snyk-scan: name: execute-snyk - requires: - - prepare-snyk filters: branches: only: - master - main - - Integrate-Snyk-SAST-Scans