added integration files: .snyk, snyk.yaml, edited install/package.json

.github/workflows/snyk.yaml

@@ -0,0 +1,37 @@
+name: Snyk Test
+
+on:
+  pull_request:
+    branches:
+      - f24
+  workflow_call: # Usually called from deploy
+
+defaults:
+  run:
+    shell: bash
+
+permissions:
+  checks: write  # for coverallsapp/github-action to create new checks
+  contents: read  # for actions/checkout to fetch code
+
+jobs:
+  snyk:
+    runs-on: ubuntu-latest
+    env:
+      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}  # Ensure your token is added as a secret in GitHub
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: NPM Install
+        uses: bahmutov/npm-install@v1
+        with:
+          useLockFile: false
+
+      - name: Run Snyk Test
+        run: npx snyk test --severity-threshold=high

.snyk

@@ -0,0 +1,42 @@
+version: v1.1293.1
+
+ignore:
+  "SNYK-JS-BOOTBOX-174704":
+    - "*": # ignore for all paths
+        reason: "No patch or upgrade available for bootbox@6.0.0"
+        expires: "2025-12-31" 
+
+  "SNYK-JS-COOKIE-8163060":
+    - "*":
+        reason: "No immediate fix available for socket.io dependency"
+        expires: "2025-12-31"
+
+  "SNYK-JS-INFLIGHT-6095116":
+    - "*":
+        reason: "No direct patch available for inflight@1.0.6"
+        expires: "2025-12-31"
+
+  "SNYK-JS-JQUERYFORM-574783":
+    - "*":
+        reason: "No upgrade available for jquery-form@4.3.0"
+        expires: "2025-12-31"
+
+  "SNYK-JS-MARKDOWNIT-6483324":
+    - "*":
+        reason: "No upgrade available"
+        expires: "2025-12-31"
+
+  "SNYK-JS-REQUEST-3361831":
+    - "*":
+        reason: "No upgrade available"
+        expires: "2025-12-31"
+
+  "SNYK-JS-TOUGHCOOKIE-5672873":
+    - "*":
+        reason: "No upgrade available"
+        expires: "2025-12-31"
+
+  "SNYK-JS-ZXCVBN-3257741":
+    - "*":
+        reason: "No upgrade path for zxcvbn@4.4.2"
+        expires: "2025-12-31"

install/package.json

@@ -169,7 +169,8 @@
         "mocha-lcov-reporter": "1.3.0",
         "mockdate": "3.0.5",
         "nyc": "15.1.0",
-        "smtp-server": "3.13.4"
+        "smtp-server": "3.13.4",
+        "snyk": "^1.1294.0"
     },
     "optionalDependencies": {
         "sass-embedded": "1.77.1"