From 53806331d8e8baf36fc4fe7a5408edd9ec5205f7 Mon Sep 17 00:00:00 2001
From: Nate <sestinj@gmail.com>
Date: Wed, 15 Oct 2025 11:17:42 -0700
Subject: [PATCH 1/2] Add daily Snyk security scan workflow with Continue CLI
 agent

---
 .github/workflows/snyk-agent.yaml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 .github/workflows/snyk-agent.yaml

diff --git a/.github/workflows/snyk-agent.yaml b/.github/workflows/snyk-agent.yaml
new file mode 100644
index 00000000000..0f1e0702a9d
--- /dev/null
+++ b/.github/workflows/snyk-agent.yaml
@@ -0,0 +1,30 @@
+name: Daily Snyk Agent
+
+on:
+  schedule:
+    # Runs at 9:00 AM UTC every day
+    - cron: "0 9 * * *"
+  workflow_dispatch: # Allows manual triggering
+
+jobs:
+  run-cn-task:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version: "20"
+
+      - name: Install Continue CLI globally
+        run: npm install -g @continuedev/cli@latest
+
+      - name: Run Snyk Agent
+        run: cd extensions/cli && cn --agent continuedev/snyk-code-scan-agent "The current directory"
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

From 1fdd4f6b6718dd7e5d32a5338dd09a0a7a884c06 Mon Sep 17 00:00:00 2001
From: Nate <sestinj@gmail.com>
Date: Wed, 15 Oct 2025 11:17:54 -0700
Subject: [PATCH 2/2] fix: headless mode

---
 .github/workflows/snyk-agent.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/snyk-agent.yaml b/.github/workflows/snyk-agent.yaml
index 0f1e0702a9d..efedbfe728e 100644
--- a/.github/workflows/snyk-agent.yaml
+++ b/.github/workflows/snyk-agent.yaml
@@ -25,6 +25,6 @@ jobs:
         run: npm install -g @continuedev/cli@latest
 
       - name: Run Snyk Agent
-        run: cd extensions/cli && cn --agent continuedev/snyk-code-scan-agent "The current directory"
+        run: cd extensions/cli && cn -p --agent continuedev/snyk-code-scan-agent "The current directory"
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}