Merge pull request #159 from okta/vova/add-snyk-and-semgrep

chore: add snyk and semgrep

.circleci/config.yml

@@ -2,10 +2,27 @@ version: 2.1
 
 orbs:
   general-platform-helpers: okta/[email protected]
+  platform-helpers: okta/platform-helpers@1
   python: circleci/[email protected]
   aws-cli: circleci/[email protected]
 
+parameters:
+  go-version:
+    type: string
+    default: "1.23"
+
 jobs:
+  snyk-scan:
+    docker:
+      - image: cimg/go:<< pipeline.parameters.go-version >>
+    steps:
+      - checkout
+      - general-platform-helpers/step-load-dependencies
+      - general-platform-helpers/step-run-snyk-monitor:
+          scan-all-projects: true
+          skip-unresolved: true
+          run-on-non-main: true
+
   reversing-labs:
     docker:
       - image: cimg/go:1.23.2
@@ -51,6 +68,18 @@ jobs:
               --suppress_output
 
 workflows:
+  semgrep:
+    jobs:
+      - platform-helpers/job-semgrep-scan:
+          name: "Scan with Semgrep"
+          context:
+            - static-analysis
+  snyk:
+    jobs:
+      - snyk-scan:
+          name: execute-snyk
+          context:
+            - static-analysis
   "Malware Scanner":
     jobs:
       - reversing-labs: