Add snyk workflows

.github/workflows/snyk-pr.yml

@@ -0,0 +1,23 @@
+name: Run Snyk scan on PRs
+
+on:
+  pull_request:
+    branches:
+      - master**
+
+jobs:
+  scan-for-new-issues:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: hivemq/hivemq-checkout-composite-action@v1
+        with:
+          path: mqtt-cli
+
+      - name: Check for new issues
+        uses: hivemq/hivemq-snyk-composite-action@v1
+        with:
+          snyk-args: --configuration-matching=^runtimeClasspath$ -d mqtt-cli
+          snyk-token: ${{ secrets.SNYK_TOKEN }}
+          github-username: ${{ secrets.PUBLISH_GITHUB_USERNAME }}
+          github-token: ${{ secrets.PUBLISH_GITHUB_TOKEN }}

.github/workflows/snyk-push.yml

@@ -0,0 +1,25 @@
+name: Run Snyk monitor on push
+
+on:
+  push:
+    branches:
+      - master**
+
+jobs:
+  run-snyk-monitor:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: hivemq/hivemq-checkout-composite-action@v1
+        with:
+          path: mqtt-cli
+
+      - name: Run Snyk monitor
+        uses: snyk/actions/gradle-jdk11@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+          ORG_GRADLE_PROJECT_hivemqCommonsUsername: ${{ secrets.PUBLISH_GITHUB_USERNAME }}
+          ORG_GRADLE_PROJECT_hivemqCommonsPassword: ${{ secrets.PUBLISH_GITHUB_TOKEN }}
+        with:
+          command: monitor
+          args: --all-sub-projects --configuration-matching=^runtimeClasspath$ --target-reference=${{ github.ref_name }} -d mqtt-cli

.github/workflows/snyk-release.yml

@@ -0,0 +1,25 @@
+name: Run Snyk monitor on releases
+
+on:
+  release:
+    types: [ published ]
+
+jobs:
+  run-snyk-monitor:
+    runs-on: ubuntu-latest
+    environment: snyk-monitor-releases
+
+    steps:
+      - uses: hivemq/hivemq-checkout-composite-action@v1
+        with:
+          path: mqtt-cli
+
+      - name: Run Snyk monitor
+        uses: snyk/actions/gradle-jdk11@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+          ORG_GRADLE_PROJECT_hivemqCommonsUsername: ${{ secrets.PUBLISH_GITHUB_USERNAME }}
+          ORG_GRADLE_PROJECT_hivemqCommonsPassword: ${{ secrets.PUBLISH_GITHUB_TOKEN }}
+        with:
+          command: monitor
+          args: --all-sub-projects --configuration-matching=^runtimeClasspath$ --target-reference=${{ github.ref_name }} -d mqtt-cli