Update main.yml

Author: MimiDas-Snyk

.github/workflows/main.yml

@@ -1,11 +1,45 @@
-name: Example workflow for Maven using Snyk
-on: push
+name: Snyk CLI Scans
+
+on:
+  push:
+    branches: [ main ]
+  # pull_request:
+  #  branches: [ main ]
+  #
+
 jobs:
-  security:
+  snyk-pipeline:
     runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@master
-      - name: Run Snyk to check for vulnerabilities
-        uses: snyk/actions/maven@master
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+    name: Snyk CLI Scans
+    env:
+      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+    steps:      
+      - uses: actions/checkout@v2
+      - name: Download Snyk
+        run: |
+          wget -O snyk https://static.snyk.io/cli/latest/snyk-linux
+          chmod +x ./snyk
+          mv ./snyk /usr/local/bin/
+          
+      - name: Authenticate Snyk
+        run: snyk auth ${SNYK_TOKEN}
+          
+      - name: Run Snyk Code
+        run: snyk code test --sarif-file-output=snyk_sast_results.json    
+        continue-on-error: true
+        
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: snyk_sast_results.json
+        
+      - name: Install packages
+        run: npm install --loglevel=error
+        
+      - name: Run Snyk Test
+        run: snyk test --all-projects
+        continue-on-error: true
+        
+      - name: Run Snyk Monitor
+        run: snyk monitor --all-projects
+        continue-on-error: true