Questions tagged [snyk]

Snyk is a service that analyzes your code to help find and fix security vulnerabilities in your applications, containers, infrastructure-as-code, and cloud environments.

Snyk is a service that analyzes your code to help find and fix security vulnerabilities in your applications, containers, infrastructure-as-code, and cloud environments.

Useful Resources

Chat

If you're interested in DevSecOps and want to discuss security (or Snyk-focused) topics in more depth, please head to the DevSecOps Community Discord.

79 questions
0
votes
1 answer

Snyk fails to ignore vulnerabilities when absolute file path is provided

Project Root Directory: C:\src\repos\test\abc For example, this is the Snyk issueId I'm trying to ignore. Command runs fine and .snyk YAML file is created in the project root. C:\src\repos\test\abc> snyk ignore --id="SNYK-PYTHON-RSA-570831" Then I…
Shubh77
  • 173
  • 1
  • 2
  • 16
0
votes
1 answer

How to use snyk commands in the build-in Webstorm terminal

I installed Snyk with "npm i -g snyk". It was installed successfully. However I can not authenticate with "snyk auth" in the terminal. It shows a error message that the command "snyk" couldn't be found. How can I use the snyk commands in the…
Nadine
  • 357
  • 1
  • 5
  • 16
0
votes
2 answers

How to control pipeline failure based on severity of snyk vulnerabilities found?

I'm developing a CI/CD pipeline with Gitlab, and am currently using snyk to run dependency security analysis. It's working great, but I would like to now implement some logic to allow the pipeline to continue without failure through this step if…
-1
votes
0 answers

NPM Installing dependency I do not want and it is a vulnerability, how can I remove it?

I am currently seeing a vulnerability reporting on my docker image for a package I do not want. The package is found here: https://snyk.io/advisor/npm-package/monorepo-symlink-test In my node_modules folder if I drill down…
user68288
  • 702
  • 2
  • 6
  • 27
1 2 3 4 5
6