Add weekly Snyk Docker image scan to Github actions

Author: pvannierop

.github/workflows/scheduled-snyk-docker.yaml

@@ -0,0 +1,29 @@
+name: Snyk scheduled Docker image scan
+on:
+  schedule:
+    - cron: '0 3 * * 1'
+  workflow_dispatch:
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/docker@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          image: radarbase/radar-output-restructure
+          args: --file=Dockerfile --org=radar-base --fail-on=upgradable --severity-threshold=high --policy-path=$PWD/.snyk
+          json: true
+
+      - name: Report new vulnerabilities
+        uses: thehyve/report-vulnerability@master
+        if: success() || failure()
+        with:
+          report-file: snyk.json
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/scheduled-snyk.yaml

@@ -0,0 +1,27 @@
+name: Snyk scheduled code base scan
+on:
+  schedule:
+    - cron: '0 2 * * 1'
+  workflow_dispatch:
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/gradle-jdk17@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --all-projects --configuration-matching='^runtimeClasspath$' --org=radar-base --fail-on=upgradable --json-file-output=snyk.json --severity-threshold=high --policy-path=$PWD/.snyk
+
+      - name: Report new vulnerabilities
+        uses: thehyve/report-vulnerability@master
+        if: success() || failure()
+        with:
+          report-file: snyk.json
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}