chore: add quality gates (#556)

* chore: add quality gates

* chore: remove snyk scan from build.yml

* chore: fix typo

.circleci/config.yml

@@ -1,7 +1,19 @@
 version: 2.1
 
 orbs:
-  prodsec: snyk/[email protected]
+  prodsec: snyk/prodsec-orb@1
+
+jobs:
+  security-scans:
+    resource_class: small
+    docker:
+      - image: cimg/openjdk:17.0
+    steps:
+      - checkout
+      - prodsec/security_scans:
+          mode: auto
+          open-source-additional-arguments: --exclude=test
+          iac-scan: disabled
 
 workflows:
   version: 2
@@ -11,4 +23,7 @@ workflows:
           name: Scan repository for secrets
           context:
             - snyk-bot-slack
-          channel: dx-local-alerts
+          channel: snyk-on-snyk-devex_ide
+
+      - security-scans:
+          context: devex_ide

.github/workflows/build.yml

@@ -51,22 +51,6 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
           SNYK_ORG_NAME: ${{ secrets.SNYK_ORG_NAME }}
 
-  snyk:
-    name: Snyk Tests
-    needs: gradleValidation
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fetch Sources
-        uses: actions/checkout@v4
-
-      - name: Install Snyk
-        uses: snyk/actions/[email protected]
-
-      - name: Snyk Monitor SCA
-        run: snyk monitor --all-projects --exclude=integTest --org=9cff56cd-57d1-49b8-9238-69ebfde7142f
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-
   pluginVerifier:
     name: Plugin Verifier
     needs: gradleValidation