Test pr check flow

README.md

@@ -3,6 +3,8 @@
 
 A vulnerable Node.js demo application, based on the [Dreamers Lab tutorial](http://dreamerslab.com/blog/en/write-a-todo-list-with-express-and-mongodb/).
 
+adding a dummy line in readme
+
 ### Running
 ```bash
 mongod &

backstage-catalog-info.yaml

@@ -0,0 +1,13 @@
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: goof
+  description: Goof
+  annotations:
+    #snyk.io/org-ids: f20676f4-3066-40aa-bdf6-ac28ba609ab6,78c91b61-4b8c-4c33-b15c-eeb94258f22b
+    snyk.io/org-id: f20676f4-3066-40aa-bdf6-ac28ba609ab6
+    github.com/project-slug: aarlaud-playground/goof
+spec:
+  type: service
+  lifecycle: production
+  owner: guest

build.yml

@@ -0,0 +1,12 @@
+platform: linux
+
+image_resource:
+  type: docker-image
+  source:
+    repository: node
+
+inputs:
+- name: goof
+
+run:
+  path: ./goof/ci/build.sh

ci/build.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+set -e -x
+
+pushd goof
+   npm install
+popd

ci/install_snyk.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+set -e -x
+
+npm install -g snyk

ci/pipeline.yml

@@ -0,0 +1,23 @@
+resources:
+- name: goof
+  type: git
+  source:
+    uri: https://github.com/aarlaud-playground/goof
+    branch: master
+
+jobs:
+- name: Install Dependencies
+  plan:
+  - get: goof
+    trigger: true
+  - task: build app
+    file: goof/build.yml
+  - task: install snyk
+    file: goof/ci/install_snyk.sh
+- name: Snyk Test
+  plan:
+  - get: goof
+    trigger: true
+    passed: [Install Dependencies]
+  - task: Run Snyk Test
+    file: goof/ci/snyk_test.sh

ci/snyk_test.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+set -e -x
+
+pushd goof
+   snyk test
+popd