Snyk Code in the CI/CD pipeline

How to run Snyk Code in a CI/CD pipeline to catch vulnerabilities in code changes

You can use CI/CD integration to test your code for vulnerabilities and ensure your changes do not introduce new vulnerabilities, keeping your applications secure.

• Snyk Code may not be supported by a Snyk CI/CD plugin, such as the Snyk Jenkins plugin. If this is the case, you can integrate Snyk CLI with your CI server.

• You can filter the results by severity, for example, fail jobs only when high-severity vulnerabilities are introduced. See Filter results by Severity.

• You can export the CLI output to JSON or SARIF standard formats. See Output test results.

• You can generate more visual results using the Snyk-to-HTML tool. See snyk-to-html.