Move Snyk scan back to test workflow

Snyk requires all npm dependencies to be installed.

Author: wimpyprogrammer

.github/workflows/security-scan.yml

@@ -34,18 +34,3 @@ jobs:
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v1
-
-      - name: Setup Snyk
-        uses: snyk/actions/setup@master
-        id: snyk
-        with:
-          snyk-version: latest
-
-      - name: Snyk version
-        run: echo "${{ steps.snyk.outputs.version }}"
-
-      - name: Run Snyk to check for vulnerabilities
-        if: ${{ github.actor != 'dependabot[bot]' }}
-        uses: snyk/actions/node@master
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

.github/workflows/tests.yml

@@ -41,3 +41,18 @@ jobs:
         uses: codecov/codecov-action@v2.1.0
         with:
           fail_ci_if_error: true
+
+      - name: Setup Snyk
+        uses: snyk/actions/setup@master
+        id: snyk
+        with:
+          snyk-version: latest
+
+      - name: Snyk version
+        run: echo "${{ steps.snyk.outputs.version }}"
+
+      - name: Run Snyk to check for vulnerabilities
+        if: ${{ github.actor != 'dependabot[bot]' }}
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}