Test Snyk CircleCi Build on Repository

[bama4]

Describe the issue as a Story
As a developer of Govready, I wish to run Snyk io on each push to determine any potential vulnerabilities.
I also wish to have reports of vulnerabilities in dependencies.

To Reproduce
N/A

Expected behavior
At each pull request/push, the CircleCi build for Snyk io is executed to report vulnerabilities with the requirements.txt file.
I can also see reports in the Snyk Organization Account.
Screenshots
N/A

Desktop (please complete the following information):
N/A

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]
• Virtual Machine?
• Screen size

Developer hints

N/A

Acceptance criteria

GIVEN a vulnerability in the dependencies of the repository
WHEN I push up code/create a pull request
THEN snyk io should create pull requests to address the vulnerabilities

• GovReady Account needs to be set up for Snyk with API token changed to Govready Account Snyk API token.
• GovReady Project in Snyk needs to be specified as the project in the CircleCi Build snyk-scan parameters.

Additional context
CircleCi Instructions: https://circleci.com/developer/orbs/orb/snyk/snyk

Links referenced in issue

[bama4]

Snyk Build Failure Example

[bama4]

Example Snyk Report Finding

[bama4]

Example Snyk Proof of Concept

https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994

[bama4]

Snyk Vulnerability Database Search

https://snyk.io/vuln