openfrontio / openfrontio/OpenFrontIO
Add and create a snyk project for our org
Open
approved
keep-open
Stale
- Dominant language
- TypeScript
- Stars
- 2.7k
- Forks
- 1.4k
- Avg merge
- 17h 43m
- Merged PRs (30d)
- 310
Description
We should have a security vendor like snyk to address some security concerns.
Snyk is a security tool that scans your open-source dependencies for known vulnerabilities and license risks, alerts you, and can auto-open fix PRs to update or patch them. Best part about it is that it is free!
**AC:**
- Create a snyk account.
- Add the snyk API token to github repo secrets.
**Resources:**
- https://snyk.io/open-source/
Contributor guide
Assessment
This issue has not been assessed yet.