name: DAL Snyk Scan
on: push
jobs:
  security:
    name: Service Snyk Scan
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: write
    steps:
      - name: Setup Node 22.11.0
        uses: actions/setup-node@v5
        with:
          node-version: 22.11.0
      
      - name: Get the project files
        uses: actions/checkout@v5
      
      - name: Unshallow Git version
        run: git fetch --unshallow

      - uses: ./.github/actions/setup-ssh
        with:
          key: ${{ secrets.PLUTO_DEPLOY_SSH_KEY }}
      
      - name: Setup Snyk
        uses: snyk/actions/setup@master
      
      - name: Snyk Test
        run: snyk test --severity-threshold=high --all-projects --exclude=integration-test,java
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}