[NDH-641] Add Snyk GitHub Workflow

.github/workflows/snyk.yml

@@ -0,0 +1,26 @@
+name: Scan Project with Snyk Python Workflow
+on: push
+permissions:
+  contents: read
+jobs:
+    security:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@master
+            - uses: actions/setup-python@v5
+              with: 
+                python-version: "3.11"
+            - name: Install Dependencies
+              run: |
+                python -m pip install --upgrade pip
+                pip install -r backend/requirements.txt
+                pip install -r etls/loadFIPS/requirements.txt
+            - name: Install Snyk CLI
+              run: |
+                npm install -g snyk@latest
+
+            - name: Run Snyk scan
+              env:
+                SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+              run: |
+                snyk test --all-projects

backend/requirements.txt

@@ -1,4 +1,4 @@
-Django==5.2.3
+Django==5.2.9
 Faker==38.2.0
 Jinja2==3.1.6
 MarkupSafe==3.0.2
@@ -41,10 +41,10 @@ rich==14.0.0
 six==1.17.0
 sniffio==1.3.1
 sqladmin==0.20.1
-sqlparse==0.5.3
-starlette==0.47.2
+sqlparse==0.5.4
+starlette==0.49.1
 text-unidecode==1.3
 types-python-dateutil==2.9.0.20250516
 typing_extensions==4.14.0
 unittest-xml-reporting==3.2.0
-urllib3==2.5.0
+urllib3==2.6.0

etls/loadFIPS/requirements.txt

@@ -1,4 +1,4 @@
-requests==2.32.3
+requests==2.32.4
 pandas==2.3.1
 sqlalchemy==2.0.41
 python-dotenv==1.1.1

frontend/package.json

@@ -52,5 +52,8 @@
     "typescript-eslint": "^8.46.0",
     "vite": "^7.1.2",
     "vitest": "^3.2.4"
+  },
+  "overrides": {
+    "mdast-util-to-hast": "13.2.1"
   }
 }