Snyk Developer Security Platform

# Scan project dependencies
snyk test

Testing /app...
✗ High severity vulnerability found in lodash
  Description: Prototype Pollution
  Introduced through: lodash@4.17.20
  Fix: Upgrade to lodash@4.17.21

snyk container test myorg/app:latest

✗ Critical vulnerability in openssl (CVE-2024-XXXX)
  Base image: node:20-slim
  Fix: Rebuild with node:20.11.1-slim

snyk iac test ./terraform/

Issue: S3 bucket without encryption
  Path: terraform/storage.tf > aws_s3_bucket.data
  Fix: Add server_side_encryption_configuration block

snyk code test

✗ High: SQL Injection
  Path: src/db/queries.ts, line 42
  Fix: Use parameterized queries instead of string concatenation

// VS Code shows inline warning:
// ⚠️ SQL Injection: User input used directly in query
const result = await db.query(`SELECT * FROM users WHERE id = '${userId}'`);

// Suggested fix:
const result = await db.query('SELECT * FROM users WHERE id = $1', [userId]);

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - name: Snyk Open Source
        uses: snyk/actions/node@master
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
      
      - name: Snyk Container
        uses: snyk/actions/docker@master
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          image: myorg/app:${{ github.sha }}
      
      - name: Snyk IaC
        uses: snyk/actions/iac@master
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          args: --report

## Snyk Security Report

### New Issues
🔴 **High**: Prototype Pollution in `lodash@4.17.20`
   Fix: `npm install lodash@4.17.21`

### Fixed Issues  
✅ Removed vulnerable `minimist@1.2.5`

# Monitor a project for new vulnerabilities
snyk monitor

# Snyk will email you when new CVEs affect your dependencies