This Project Implements a GitHub Action workflow to Automate the Security Checks by cloning the NodeJS App Source code, confirming build integrity, and performing security scans. Leveraged Snyk for Static Application Security Testing (SAST) and Software Composition Analysis (SCA) to find vulnerabilities, and OWASP ZAP for penetration tests.