Replaced snyk api token with oauth (#121)

* Replaced snyk api token with oauth

* Update security_snyk_scan.yml

Author: s99mj

.github/workflows/security_snyk_scan.yml

@@ -7,6 +7,10 @@ on:
 
 jobs:
   security-snyk-check:
+    permissions:
+      contents: read
+      actions: read
+      security-events: write
     name: Project security Snyk dependency check
     uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_snyk_scan.yml@v2
     with:
@@ -18,5 +22,6 @@ jobs:
       slack_include_summary: true
       snyk_policy_path: ''
     secrets:
-      HMPPS_SNYK_API_KEY: ${{ secrets.HMPPS_SNYK_API_KEY }}
+      HMPPS_SNYK_CLIENT_SECRET: ${{ secrets.HMPPS_SNYK_CLIENT_SECRET }}
+      HMPPS_SNYK_CLIENT_ID: ${{ secrets.HMPPS_SNYK_CLIENT_ID }}
       HMPPS_SRE_SLACK_BOT_TOKEN: ${{ secrets.HMPPS_SRE_SLACK_BOT_TOKEN }}