Install snyk and set up yml file to integrate into CI/CD

.github/workflows/snyk.yml

@@ -0,0 +1,23 @@
+name: Example workflow for Node using Snyk
+on: push
+jobs:
+  snyk:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v2
+        with:
+          node-version: '14'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        with:
+          command: test
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

.gitignore

@@ -66,7 +66,6 @@ coverage
 test/files/normalise.jpg.png
 test/files/normalise-resized.jpg
 package-lock.json
-/package.json
 *.mongodb
 link-plugins.sh
 test.sh

.prettierrc

@@ -0,0 +1,9 @@
+{
+    "useTabs": true,
+    "arrowParens": "always",
+    "endOfLine": "auto",
+    "singleQuote": true,
+    "tabWidth": 1,
+    "requirePragma": false,
+    "insertPragma": false
+}

package.json

@@ -0,0 +1,5 @@
+{
+  "dependencies": {
+    "@snyk/protect": "^1.657.0"
+  }
+}

test/posts/create.js

@@ -0,0 +1,75 @@
+'use strict';
+
+const assert = require('assert');
+const db = require('../mocks/databasemock');
+const plugins = require('../../src/plugins');
+const user = require('../../src/user');
+const topics = require('../../src/topics');
+const categories = require('../../src/categories');
+const groups = require('../../src/groups');
+const privileges = require('../../src/privileges');
+const meta = require('../../src/meta');
+
+const Posts = {};
+
+describe('create post', () => {
+	let pid;
+	let purgePid;
+	let cid;
+	let uid;
+	let endorsed;
+
+	before(async () => {
+		// Create a user
+		uid = await user.create({
+			username: 'uploads user',
+			password: 'abracadabra',
+			gdpr_consent: 1,
+		});
+
+		// Create a test category
+		({ cid } = await categories.create({
+			name: 'Test Category',
+			description: 'Test category created by testing script',
+		}));
+	});
+
+	it('create a post where endorsed is automatically false', async () => {
+		try {
+			// Create a post within the category
+			const topicPostData = await topics.post({
+				uid,
+				cid,
+				title: 'topic with some images',
+				content:
+					'here is an image [alt text](/assets/uploads/files/abracadabra.png) and another [alt text](/assets/uploads/files/shazam.jpg)',
+			});
+
+			// Check if 'endorsed' is false
+			endorsed = topicPostData.postData.endorsed;
+			assert.strictEqual(endorsed, false);
+		} catch (error) {
+			console.log(error);
+		}
+	});
+
+	it('create a post where endorsed is initialized to be true', async () => {
+		try {
+			// Create a post within the category
+			const topicPostData = await topics.post({
+				uid,
+				cid,
+				title: 'topic with some images',
+				content:
+					'here is an image [alt text](/assets/uploads/files/abracadabra.png) and another [alt text](/assets/uploads/files/shazam.jpg)',
+				endorsed: true,
+			});
+
+			// Check if 'endorsed' is true
+			endorsed = topicPostData.postData.endorsed;
+			assert.strictEqual(endorsed, true);
+		} catch (error) {
+			console.log(error);
+		}
+	});
+});