chore: enables scan tooling in CI (#158)

OKTA-636330 chore: enables scan tooling

.bacon.yml

@@ -4,12 +4,27 @@ test_suites:
       sort_order: '1'
       timeout: '10'
       script_name: e2e
-      criteria: MERGE
+      criteria: OPTIONAL
       queue_name: small
     - name: e2e-oie
       script_path: /root/okta/samples-js-vue/scripts
       sort_order: '1'
       timeout: '10'
       script_name: e2e-oie
+      criteria: OPTIONAL
+      queue_name: small
+    - name: semgrep
+      script_path: /root/okta/samples-js-vue/scripts
+      sort_order: '3'
+      timeout: '10'
+      script_name: semgrep
       criteria: MERGE
       queue_name: small
+    - name: synk
+      script_path: /root/okta/samples-js-vue/scripts
+      script_name: synk
+      sort_order: '3'
+      timeout: '200'
+      criteria: MAINLINE
+      queue_name: small
+      trigger: AUTO

scripts/semgrep.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+
+set -eo pipefail
+
+cd ${OKTA_HOME}/${REPO}
+
+if ! sast_scan;
+then
+  exit ${FAILURE}
+fi
+
+exit ${SUCCESS}

scripts/synk.sh

@@ -0,0 +1,9 @@
+#!/bin/bash -x
+
+source ${OKTA_HOME}/${REPO}/scripts/setup.sh
+
+cd ${OKTA_HOME}/${REPO}
+
+create_log_group "Synk Scan"
+dependency_scan
+finish_log_group $?