feat: add the forceHttp1 config option, replacing CYPRESS_INTERNAL_DISABLE_PROXY
#21341
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Snyk Static Analysis Scan | |
| # This git workflow leverages Snyk actions to perform a Static Application | |
| # Testing scan (SAST) on our first-party code upon Pull Requests to the | |
| # "develop" branch. We use this as a control to prevent vulnerabilities | |
| # from being introduced into the codebase. | |
| on: | |
| pull_request: | |
| branches: | |
| - develop | |
| - release/* | |
| pull_request_target: | |
| branches: | |
| - develop | |
| - release/* | |
| permissions: | |
| contents: read | |
| jobs: | |
| Snyk_SAST_Scan: | |
| runs-on: ubuntu-latest | |
| # Route each PR to exactly one event: internal -> pull_request, fork -> pull_request_target. | |
| if: | | |
| (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository) || | |
| (github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository) | |
| environment: ${{ github.event_name == 'pull_request_target' && 'fork-pr-review' || '' }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Set up Node.js | |
| uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 | |
| with: | |
| node-version-file: .node-version | |
| # Cache only on pull_request (internal PRs) — pull_request_target writes scope to the base branch and could be poisoned by an approved fork PR. | |
| cache: ${{ github.event_name == 'pull_request' && 'yarn' || '' }} | |
| - name: Run yarn | |
| run: yarn | |
| - name: Run build | |
| run: yarn build | |
| - uses: snyk/actions/setup@9adf32b1121593767fc3c057af55b55db032dc04 # v1 | |
| - name: Perform Static Analysis Test | |
| continue-on-error: true | |
| run: | | |
| snyk code test --yarn-workspaces --strict-out-of-sync=false --detection-depth=6 --exclude=docker,Dockerfile --severity-threshold=high | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| SNYK_API: https://api.snyk.io | |
| # The Following Requires Advanced Security License | |
| # - name: Upload results to Github Code Scanning | |
| # uses: github/codeql-action/upload-sarif@v1 | |
| # with: | |
| # sarif_file: snyk_sarif |