Integrating Snyk Analysis Tool

[njouud]

Pull request for integrating snyk, a static security analysis tool, with the codebase. Snyk scans the dependencies of the codebase for vulnerabilities (security risks) and provides code security analysis on the app.snyk.io website.

1. Process:

• Installed the tool withnpm install -g snyk, then made a snyk account with snyk auth to be able to run tests, then finally snyk test to run the test scan, where the output is given in the terminal (screenshots below).
• Copied the Snyk API key and stored it in github secrets under Actions of this repository
• Created the below files

2. Changed files:
package.json: manually added the tool in the dev dependencies with "snyk": "1.1293.1".
install/package.json: manually added the tool in dev dependencies with "snyk": "^1.1294.0" to address NPM install error.
.snyk: created a new file in the root of the application to add the dependencies snyk should ignore (with specifying the reason for ignoring).
.github/workflows/snyk.yaml: file to integrate Snyk in the github actions workflow, specifying the severity threshold of vulnerability risks to test (high vulnerability) and the frequency of running tests (every PR).

3. Terminal output screenshots (after resolving vulnerabilities by updating):

[coveralls]

Pull Request Test Coverage Report for Build 11617396577

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 82.367%

---

Totals
Change from base Build 11530671628:	0.0%
Covered Lines:	22368
Relevant Lines:	25711

---

💛 - Coveralls

[rkensouh]

Looks good, ready for merging.