Branc344

.github/workflows/main.yml

@@ -0,0 +1,59 @@
+name: Snyk Open Source Scans
+concurrency:
+  group: snyk-opensource-actions-${{ github.ref }}
+  cancel-in-progress: true
+on:
+  merge_group:
+    types: [checks_requested]
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+jobs:
+  snyk-opensource-pipeline:
+    runs-on: ubuntu-22.04
+    name: Snyk Open Source Diff Scan
+    env:
+      SNYK_TOKEN: ${{ secrets.SNYK_GH_ACTIONS_TOKEN }}
+      SNYK_ORG: ${{ vars.SNYK_ORG }}
+
+    steps:
+    # Checkout base ref branch
+    - uses: actions/checkout@v4
+      with:
+        ref: ${{ github.base_ref }}
+    - uses: actions/setup-python@v5
+      with:
+        python-version: '3.10'
+#        cache: 'pip'
+#    - run: pip install -r requirements.txt
+    - name: Download Snyk
+      uses: actions/setup-node@v4
+      with:
+        node-version: 20
+
+    - name: Install snyk
+      run: npm install --location=global snyk@latest
+
+    - name: Install snyk-delta
+      run: npm install --location=global snyk-delta@latest
+
+    - name: Install snyk_delta_all_projects.sh
+      run: |
+        wget -O snyk_delta_all_projects.sh https://raw.githubusercontent.com/snyk-tech-services/snyk-delta/refs/heads/develop/snyk_delta_all_projects.sh
+        mv ./snyk_delta_all_projects.sh /usr/local/bin/
+
+    - name: Install jq
+      run: npm install --location=global node-jq
+
+    - name: Authenticate Snyk
+      run: snyk auth ${SNYK_TOKEN}
+
+    - name: Run Snyk Open Source and diff
+     run: /bin/bash snyk_delta_all_projects.sh --severity=low --org=${SNYK_ORG} || true
+     # run: snyk test --org=${SNYK_ORG} --all-projects
+
+#    - name: Run snyk monitor
+#      uses: snyk/actions/node@master
+#      with:
+#        command: monitor
+#        args: --all-projects --detection-depth=2 --org=${SNYK_ORG} --severity=high
+#      run: snyk monitor --all-projects --detection-depth=2 --org=${SNYK_ORG}

.project

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>nodejs-goof</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+		<buildCommand>
+			<name>org.eclipse.wst.validation.validationbuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
+	</buildSpec>
+	<natures>
+		<nature>org.eclipse.wst.jsdt.core.jsNature</nature>
+	</natures>
+</projectDescription>

.settings/.jsdtscope

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<classpath>
+	<classpathentry kind="con" path="org.eclipse.wst.jsdt.launching.JRE_CONTAINER"/>
+	<classpathentry kind="con" path="org.eclipse.wst.jsdt.launching.baseBrowserLibrary"/>
+	<classpathentry kind="src" path=""/>
+	<classpathentry kind="output" path=""/>
+</classpath>

.settings/org.eclipse.wst.jsdt.ui.superType.container

@@ -0,0 +1 @@
+org.eclipse.wst.jsdt.launching.JRE_CONTAINER

.settings/org.eclipse.wst.jsdt.ui.superType.name

@@ -0,0 +1 @@
+Global

.vscode/extensions.json

@@ -0,0 +1,5 @@
+{
+    "recommendations": [
+        "snyk-security.snyk-vulnerability-scanner"
+    ]
+}

.vscode/settings.json

@@ -0,0 +1,10 @@
+{
+    "snyk.trustedFolders": [
+
+        "/Users/sameerkhassawneh/Documents/GitHub/nodejs-goof"       
+    ],
+    "snyk.advanced.customEndpoint": "",
+    "snyk.advanced.organization": "sameer.khassawneh",
+    "editor.defaultFormatter": "aaron-bond.better-comments",
+    "snyk.advanced.additionalParameters": "-all-projects"
+}

Dockerfile

@@ -5,7 +5,7 @@ RUN mkdir /usr/src/goof
 RUN mkdir /tmp/extracted_files
 COPY . /usr/src/goof
 WORKDIR /usr/src/goof
-
+#
 RUN npm update
 RUN npm install
 EXPOSE 3001

app.json

@@ -29,6 +29,7 @@
   "buildpacks": [
     {
       "url": "heroku/nodejs"
+        "url": "heroku/nodejs"
     }
   ]
-}
+}