Snyk

fix: git user to cfl-bot #404

	name: Snyk
	on:
	release:
	types: [published]
	pull_request:
	jobs:
	security:
	name: Run Snyk
	runs-on: ubuntu-20.04
	env:
	LANG: C.UTF-8
	steps:
	- name: Checkout
	uses: actions/checkout@v3
	with:
	fetch-depth: 0
	- name: Setup python-version
	uses: actions/setup-python@v4
	with:
	python-version: "3.8"
	architecture: "x64"
	- name: Install Python dependencies
	run: \|
	pip install pipenv
	pipenv install --dev --system
	- name: Generate requirements
	run: pip freeze > requirements.txt
	- name: Run Snyk to check for vulnerabilities in Python
	uses: snyk/actions/python-3.8@master
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	with:
	command: monitor --file=requirements.txt --package-manager=pip --project-name="portal"

Provide feedback