Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Static analysis tool: snyk test #79

Open
wants to merge 1 commit into
base: f24
Choose a base branch
from
Open

Static analysis tool: snyk test #79

wants to merge 1 commit into from

Conversation

njouud
Copy link

@njouud njouud commented Oct 23, 2024

Pull request for testing the codebase with snyk, a static analysis tool. Snyk scans the dependencies of the codebase for vulnerabilities (security risks).

1. Process:
installed the tool withnpm install -g snyk, then made a snyk account with snyk auth to be able to run tests, then finally snyk test to run the test scan, where the output is given in the terminal (screenshots below).

2. Changed files:
package.json: manually added the tool in the dev dependencies with "snyk": "1.1293.1".
.snyk: created a new file in the root of the application to add the dependencies snyk should ignore (with specifying the reason for ignoring).

3. Terminal output screenshots:
Screenshot 2024-10-23 at 9 22 39 PM
Screenshot 2024-10-23 at 9 22 45 PM

4. package.json changes:
Screenshot 2024-10-23 at 10 21 09 PM

@coveralls
Copy link

Pull Request Test Coverage Report for Build 11485909974

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 82.372%

Totals Coverage Status
Change from base Build 11459547874: 0.0%
Covered Lines: 22369
Relevant Lines: 25711

💛 - Coveralls

@njouud njouud changed the title Tool integration: snyk test Analysis tool: snyk test Oct 23, 2024
@njouud njouud changed the title Analysis tool: snyk test Static analysis tool: snyk test Oct 23, 2024
@njouud njouud self-assigned this Oct 24, 2024
@njouud njouud requested a review from Procos12 October 24, 2024 12:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants