Merge pull request #932 from snowflakedb/PRODSEC-1265

PRODSEC-1265 Whitesource Transition to Snyk

.github/workflows/snyk-issue.yml

@@ -0,0 +1,29 @@
+name: Snyk Issue
+
+on:
+  schedule:
+    - cron: '* */12 * * *'
+
+concurrency: snyk-issue
+
+jobs:
+  whitesource:
+    runs-on: ubuntu-latest
+    steps:
+    - name: checkout action
+      uses: actions/checkout@v3
+      with:
+        repository: snowflakedb/whitesource-actions
+        token: ${{ secrets.WHITESOURCE_ACTION_TOKEN }}
+        path: whitesource-actions
+    - name: set-env
+      run: echo "REPO=$(basename $GITHUB_REPOSITORY)" >> $GITHUB_ENV
+    - name: Jira Creation
+      uses: ./whitesource-actions/snyk-issue
+      with:
+        snyk_org: ${{ secrets.SNYK_ORG_ID_PUBLIC_REPO }}
+        snyk_token:  ${{ secrets.SNYK_GITHUB_INTEGRATION_TOKEN }}
+        jira_token: ${{ secrets.JIRA_TOKEN_PUBLIC_REPO }}
+      env:
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+

.github/workflows/whitesource.yml → .github/workflows/snyk-pr.yml

@@ -1,28 +1,30 @@
-name: whitesource
+name: snyk-pr
 on:
   pull_request:
     branches:
       - master
 jobs:
   whitesource:
     runs-on: ubuntu-latest
-    if: ${{ github.event.pull_request.user.login == 'whitesource-for-github-com[bot]' }}
+    if: ${{ github.event.pull_request.user.login == 'sfc-gh-snyk-sca-sa' }}
     steps:
     - name: checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         ref: ${{ github.event.pull_request.head.ref }}
         fetch-depth: 0
 
     - name: checkout action
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         repository: snowflakedb/whitesource-actions
         token: ${{ secrets.WHITESOURCE_ACTION_TOKEN }}
         path: whitesource-actions
 
     - name: PR
-      uses: ./whitesource-actions/whitesource-pr
+      uses: ./whitesource-actions/snyk-pr
+      env:
+        PR_TITLE: ${{ github.event.pull_request.title }}
       with:
         jira_token: ${{ secrets.JIRA_TOKEN_PUBLIC_REPO }}
         gh_token: ${{ secrets.GITHUB_TOKEN }}

ci/container/build_component.sh

@@ -9,7 +9,6 @@ JDBC_ROOT=$(cd "${THIS_DIR}/../../" && pwd)
 cd $JDBC_ROOT
 rm -f lib/*.jar
 mvn clean install --batch-mode --show-version
-[[ -n "$WHITESOURCE_API_KEY" ]] && $THIS_DIR/wss.sh
 
 cd FIPS
 rm -f lib/*.jar