From 7328cbdbd578a133377586e2df2cdca5a41f00d5 Mon Sep 17 00:00:00 2001
From: jacobrheath <76011913+jacobrheath@users.noreply.github.com>
Date: Mon, 26 Jul 2021 12:24:43 -0700
Subject: [PATCH] feat[sastisfaction]: adding non-blocking security linting to
 cellxgene (#2210)

* adding sastisfaction

* Update sastisfaction.yml

* Update sastisfaction.yml
---
 .github/workflows/sastisfaction.yml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 .github/workflows/sastisfaction.yml

diff --git a/.github/workflows/sastisfaction.yml b/.github/workflows/sastisfaction.yml
new file mode 100644
index 00000000..d48d3eeb
--- /dev/null
+++ b/.github/workflows/sastisfaction.yml
@@ -0,0 +1,27 @@
+name: Run SASTisfaction
+on:
+  - pull_request
+
+jobs:
+  sastisfaction:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2
+        with:
+          repository: chanzuckerberg/sastisfaction
+          ref: main
+          path: .github/actions/sastisfaction
+          ssh-key: ${{ secrets.SASTISFACTION_READ_KEY }}
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Docker pull
+        run: docker pull ghcr.io/chanzuckerberg/sastisfaction:main
+      - name: Run SASTisfaction
+        uses: ./.github/actions/sastisfaction
+        with:
+          snowflake_private_key: ${{ secrets.SASTISFACTION_RSA_KEY }}