Merge pull request #497 from okta/arvindkrishnakumar-okta-patch-3

Add Snyk to CCI
okta · Aug 8, 2024 · fc0d69a · fc0d69a
2 parents 8a4c3ed + d34497a
commit fc0d69a
Showing 1 changed file with 23 additions and 7 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -14,35 +14,51 @@ jobs:
 
   jdk8:
     docker:
-      - image: cimg/openjdk:8.0.322
+      - image: cimg/openjdk:8.0.402
     environment:
         JVM_OPTS: -Xmx3200m
     steps: *build_steps
 
   jdk11:
     docker:
-      - image: cimg/openjdk:11.0.13
+      - image: cimg/openjdk:11.0.22
     environment:
         JVM_OPTS: -Xmx3200m
     steps: *build_steps
 
   jdk17:
     docker:
-      - image: cimg/openjdk:17.0.4
+      - image: cimg/openjdk:17.0.11
     environment:
         JVM_OPTS: -Xmx3200m
     steps: *build_steps
 
+  snyk-scan:
+    docker:
+      - image: cimg/openjdk:17.0.11
+    steps:
+      - checkout
+      - run: ./mvnw clean install -Pci -Dlicense.skip=true -Dmaven.test.skip.exec=true
+      - general-platform-helpers/step-load-dependencies
+      - general-platform-helpers/step-run-snyk-monitor:
+          scan-all-projects: false
+          skip-unresolved: false
+          run-on-non-main: true
+          additional-arguments: "--maven-aggregate-project"
+
 workflows:
-  build_and_test:
+   "Circle CI Tests":
     jobs:
       - jdk8
       - jdk11
       - jdk17
-  # See OKTA-624788
-  semgrep:
-    jobs:
       - general-platform-helpers/job-semgrep-scan:
           name: "Scan with Semgrep"
           context:
             - static-analysis
+      - snyk-scan:
+          name: execute-snyk
+          requires:
+            - jdk17
+          context:
+            - static-analysis