Jin mok patch 2

.github/workflows/main.yml

@@ -4,6 +4,23 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@master
+      #- uses: actions/checkout@v4
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16
+      - run: npm ci
+      - run: npm install 
+      - uses: snyk/actions/setup@master
+      - name: Snyk monitor
+        run: snyk test --org=2bd54efe-13d4-4a76-9986-a7ba097105e5 
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+#on: push
+#jobs:
+ # security:
+  #  runs-on: ubuntu-latest
+   # steps:
       - uses: actions/checkout@master
       - name: Run Snyk to check for vulnerabilities
         uses: snyk/actions/node@master

README.md

@@ -8,11 +8,11 @@ A vulnerable Node.js demo application, based on the [Dreamers Lab tutorial](http
 This vulnerable app includes the following capabilities to experiment with:
 * [Exploitable packages](#exploiting-the-vulnerabilities) with known vulnerabilities
 * [Docker Image Scanning](#docker-image-scanning) for base images with known vulnerabilities in system libraries
-* [Runtime alerts](#runtime-alerts) for detecting an invocation of vulnerable functions in open source dependencies
+* [Runtime alerts](#runtime-alerts) for detecting an invocation of vulnerable functions in open source dependenciesb 
 
 ## Running
 ```bash
-mongod &
+mongod &sdf
 
 git clone https://github.com/snyk-labs/nodejs-goof
 npm install