loki/.github/workflows/snyk.yml

name: Snyk Monitor Scanning
on:
 release:
   types: [published]
 push:
    branches:
      - 'main'
      - 'master'
      - 'release-[0-9]+.[0-9]+.x'
 workflow_dispatch:

jobs:
  snyk-scan-ci:
    uses: 'grafana/security-github-actions/.github/workflows/snyk_monitor.yml@main'
    permissions:
      contents: "read"
      id-token: "write"
      pull-requests: "write"
    secrets:
      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}