Circleci editor/master

.circleci/config.yml

@@ -1,6 +1,6 @@
 version: 2.1
 orbs:
-  snyk: snyk/snyk@0.0.8
+  snyk: snyk/snyk@1.1.1
 
 workflows: #creating a workflow to define the context - collection of different jobs
   test-env-vars: #setting up a job to define the context which this project will use
@@ -15,23 +15,15 @@ jobs: # a collection of steps
   build-test-monitor-app: # runs not using Workflows must have a `build` job as entry point #directory where steps will run
     working_directory: ~/goof  
     docker:       
-      - image: circleci/node:4.8.2       
+      - image: 'cimg/node:lts'      
     steps:  
-      - checkout     
-      - run: 
-         name: echo "install and build npm project"  
-         command: 'sudo npm install -q'
-      - run: 
-         name: echo "build project"
-         command: 'npm run build'
-      #- run: 
-       #  name: echo "build Docker image"
-        # command: 'docker build -t my-new-container-goof-image .'
-      - snyk/scan:
+       - checkout
+       - run: npm ci
+       - snyk/scan:
                 fail-on-issues: false
                 monitor-on-build: true
                 token-variable: SNYKTOKEN
-                organization: panda-not-omar
+                organization: ninja-snyker
                 project: circleCi-goof
                 severity-threshold: high
 
@@ -52,11 +44,27 @@ jobs: # a collection of steps
                 fail-on-issues: false
                 monitor-on-build: true
                 token-variable: SNYKTOKEN
-                organization: panda-not-omar
+                organization: ninja-snyker
                 project: circleCi-goof-container
                 severity-threshold: low
                 target-file: Dockerfile
                 docker-image-name: my-new-container-circleci-goof-image
+docker:
+  - image: 'snyk/snyk-cli:npm'
+parameters:
+  args:
+    default: ''
+    description: >
+      See the Snyk CLI help page for information on additional arguments:
+      https://support.snyk.io/hc/en-us/articles/360003812578-CLI-reference
+    type: string
+resource_class: medium
+steps:
+  - checkout
+  - scan:
+      additional-arguments: ' '
+      command: iac test
+      monitor-on-build: false
 
 #workflows:
   #node-tests:

Dockerfile

@@ -1,6 +1,7 @@
 # FROM node:6-stretch
-FROM node:14.1.0
+FROM node:current-alpine3.14
 
+RUN mkdir /usr/src
 RUN mkdir /usr/src/goof
 RUN mkdir /tmp/extracted_files
 COPY . /usr/src/goof