Integrate rl-scanner #137

	name: Snyk

	on:
	merge_group:
	pull_request:
	types:
	- opened
	- synchronize
	push:
	branches:
	- master
	schedule:
	- cron: "30 0 1,15 * *"

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}

	jobs:

	check:

	name: Check for Vulnerabilities
	runs-on: windows-2022

	steps:
	- if: github.actor == 'dependabot[bot]' \|\| github.event_name == 'merge_group'
	run: exit 0 # Skip unnecessary test runs for dependabot and merge queues. Artifically flag as successful, as this is a required check for branch protection.

	- uses: actions/checkout@v4
	with:
	ref: ${{ github.event.pull_request.merge_commit_sha \|\| github.ref }}

	- name: Install Java
	uses: actions/setup-java@v3
	with:
	distribution: 'temurin'
	java-version: '11'

	- name: Install .NET
	uses: actions/setup-dotnet@v3

	- name: Install .NET Android and iOS workload
	run: dotnet workload install android ios maui

	- name: Setup NuGet
	uses: nuget/setup-nuget@v1

	- name: Restore NuGet
	run: nuget restore Auth0.OidcClient.All.sln

	# Install Snyk
	- run: npm install snyk -g

	# Check that project is registered with Snyk when triggered from master branch
	- if: github.ref == 'refs/heads/master'
	run: snyk monitor --file=Auth0.OidcClient.All.sln
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	continue-on-error: true

	# Report vulnerabilities
	- run: snyk test --file=Auth0.OidcClient.All.sln
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

Provide feedback