Summary

Integrates Snyk software composition analysis (SCA) scanning into the CircleCI pipeline to detect vulnerabilities in project dependencies, addressing Product Security Team requirements.

Changes

• Added general-platform-helpers orb for Snyk integration
• Created snyk-scan job that runs after successful build completion
• Added workspace persistence to share build artifacts with scanner
• Configured comprehensive dependency scanning with depth-4 detection
• Runs on all branches using static-analysis context

Security Impact

• Enables automated vulnerability detection in dependencies
• Provides continuous monitoring for security issues
• Integrates with existing security workflows (semgrep)

Testing

• Pipeline will run Snyk scan after build-test job completes
• Scanner configured to analyze all project files and dependencies
• Results will be reported to security team dashboard

Fixes: Product Security Team dependency scanning requirement