CI/CD Integrations

name: Patchlynx Security Check
on:
  pull_request:
    paths:
      - "**/package-lock.json"
      - "**/yarn.lock"
jobs:
  patchlynx:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: patchlynx/action@v2
        with:
          api-key: ${{ secrets.PATCHLYNX_API_KEY }}
          fail-on: CRITICAL

version: 2.1
orbs:
  patchlynx: patchlynx/[email protected]
workflows:
  security:
    jobs:
      - patchlynx/scan:
          api-key: ${{ PATCHLYNX_API_KEY }}

stage('Security') {
  steps {
    withCredentials([string(credentialsId: 'PATCHLYNX_KEY',
                     variable: 'PLX_KEY')]) {
      sh 'plx scan --api-key $PLX_KEY --fail-on HIGH'
    }
  }
}

- task: Bash@3
  displayName: 'Patchlynx Security Scan'
  env:
    PLX_API_KEY: $(PATCHLYNX_API_KEY)
  inputs:
    script: |
      npm install -g @patchlynx/cli
      plx scan --fail-on CRITICAL