[DROID-5012] Added snyk monitor pipeline

tools/buildkite/snyk_monitor.yaml

@@ -0,0 +1,72 @@
+steps:
+  - label: "Enforce Snyk Token"
+    key: "enforce-snyk-token"
+    commands: |
+        if [ -z $$SNYK_TOKEN ]
+        then
+            echo "Snyk token is not set"
+            exit -1
+        else
+            buildkite-agent meta-data set "snyk-auth-token" "$$SNYK_TOKEN"
+            echo "Snyk token is set"
+        fi
+    plugins:
+      - seek-oss/aws-sm#v2.1.0:
+          env:
+            SNYK_TOKEN:
+              secret-id: "snyk/merch_sdk_adr/token"
+              json-key: ".[\"snyk-merch-adr-cicd\"]"
+
+  - label: "Snyk Vulnerability Audit"
+    key: "snyk-audit"
+    depends_on: "enforce-snyk-token"
+    commands: |
+        curl https://static.snyk.io/cli/latest/snyk-linux -o snyk
+        chmod +x ./snyk
+        ls -l ./snyk
+
+        token=$(buildkite-agent meta-data get "snyk-auth-token")
+        ./snyk auth $$token -d
+
+        set -e
+        SNYK_STATUS=0
+
+        # 'test' will be run when this pipeline is changed to blocking PR on failure until then 'monitor' will send snapshots on weekly basis
+        # ./snyk test --org=$$SNYK_ORG --all-sub-projects --json || SNYK_STATUS=$$?
+
+        ./gradlew clean assembleDebug
+        ./snyk monitor -d --org=$$SNYK_ORG --all-projects --json | tee > vuln.json || SNYK_STATUS=$$?
+
+        echo "snyk monitor exit code = $$SNYK_STATUS"
+
+        case $$SNYK_STATUS in
+          0) echo "snyk successful - no vulnerabilities" ;;
+          *) echo "snyk reports some vulnerabilities" ;;
+        esac
+
+        buildkite-agent meta-data set "snyk-exit-status" "$$SNYK_STATUS"
+    agents:
+      queue: 'android'
+    plugins:
+      - docker#v3.3.0:
+          image: "998571911837.dkr.ecr.us-east-1.amazonaws.com/affirm-android:android-dev-v5-latest"
+          workdir: "/affirm-merchant-sdk-android"
+          environment:
+            - "ON_CI=true"
+            - "ENABLE_CACHE=true"
+            - "SNYK_ORG=android-merch-sdk-bk"
+    artifact_paths:
+      - vuln.json
+
+    retry:
+      automatic:
+      - limit: 2
+        exit_status: 255
+      - limit: 2
+        exit_status: 139
+      - limit: 2
+        exit_status: 125
+
+notify:
+  - slack: "#proj-snyk-android-int"
+    if: build.state == "failed"