feat: support yarn workspaces projects in --all-projects

[lili2311]

• Follows CONTRIBUTING rules

What does this PR do?

Support detecting & scanning Yarn workspace projects --all-projects.
Process all projects as yarn workspaces first since many files are related to each other and could belong to a workspace, then process the rest as usual.

Where should the reviewer start?

https://github.com/snyk/snyk/pull/2341/files#diff-2194ffc6b9f5b3533db3a8c636c6fcde3d7f163e92de6d915a5dc542a576fb82R48

How should this be manually tested?

Run snyk test --all-projects in a yarn workspaces projects

What are the relevant tickets?

https://github.com/snyk/snyk/issues/1561

Screenshots

Scenario 1:

snyk test --all-projects detects all the Yarn workspace projects + the non-workspace project.

Scenario 2:

snyk test --all-projects --json has the same output all the Yarn workspace projects via --yarn-workspaces with the addition of the non-workspace project.

Scenario 3:

Out of sync error during --yarn-workspaces scan is resulting in the same error code and behaviour as an error in another project type during --all-projects

Note: --all-projects by default does not log the errors and instead shows them in debug mode. So the difference in the error seen is expected.

No supported manifests error during --yarn-workspaces scan is resulting in the same error code and message as during --all-projects

Scenario 4:

Scenario 5:

snyk-dev test --all-projects --strict-out-of-sync=false and snyk-dev test --yarn-workspaces --strict-out-of-sync=false both detect and scan all the projects in a yarn workspace monorepo

Scenario 6 ⚠️ :

--all-projects does not fail if 1 project fails, it logs it and keeps going. So scanning a out of sync workspace now follows the same login when scanned with --all-projects to ensure backwards compatible & expected behaviour. The same behaviour as with --yarn-workspaces can be achieved by adding --fail-fast flag.

Scenario 7:

Exit codes match when 100% of the projects fail to scan via --all-projects and --yarn-workspaces

Scenario 8:

--all-projects --dev --json matches the data from --yarn-workspaces --dev --json + finds an extra non workspace projects.

⚠️ need to check why the patched date has a slight diff.

Scenario 9:

snyk monitor --all-projects matches the same projects from snyk monitor --yarn-workspaces + applies all the Snyk org ignores

[github-actions]

Warnings

⚠️

Since the CLI is unifying on a standard and improved tooling, we're starting to migrate old-style imports and exports to ES6 ones. A file you've modified is using either module.exports or require(). If you can, please update them to ES6 import syntax and export syntax. Files found: src/lib/plugins/get-multi-plugin-result.ts src/lib/plugins/nodejs-plugin/yarn-workspaces-parser.ts src/lib/snyk-test/run-test.ts

Generated by 🚫 dangerJS against 2e5effe

[admons]

Please see my comments

[lili2311]

Ready for review, still have some manual verification left to do before it can be merged

[lili2311]

QA completed, please see the PR description for tested scenarios & their results