Data Share Data Dictionary

Snyk Data Share is a comprehensive dataset encompassing various data pillars that support a wide range of use cases. You can use this dataset to present key security metrics such as issue backlog, aging, MTTR, SLA compliance, and test coverage, as well as to prioritize issues based on different factors, such as risk score, severity, CVSS, EPSS, and many more.

This dictionary is designed to help you navigate the dataset efficiently, with clear explanations of each table's purpose and the specific data contained in each column, enabling you to leverage the X dataset to meet your data reporting needs.

Data Share Tables

The diagram above represents the objects listed in the data dictionary as a database diagram. It covers the following tables:

• Groups

• Orgs

• Projects

• Issues

• Usage events

• Jira issues

Groups

current version: v1.0

The GROUPS table contains the main attributes of Snyk Groups. This data can be utilized for performing aggregations on the Group level or for zooming into the scope of specific Groups.

Column name	Data type	Description
public_id	varchar	A universally unique identifier for a Group, assigned i the records source database.
display_name	varchar	The name of this group.
slug	varchar	The name of the Group within Snyk.
created	timestamp_ntz	When this record was created in Snyk.
deleted	timestamp_ntz	When this record was deleted from Snyk.
modified	timestamp_ntz	When this record was last modified within Snyk.
__updated_at	timestamp_ntz	When the data share data transformation last updated this record.

Orgs

current version: v1.0

The ORGS table contains the main attributes of Snyk Organizations. This data can be utilized for performing aggregations on the organization level or for zooming into the scope of specific organizations.

The group_public_id column allows you to query organizations in specific groups.

Column name	Data type	Description
public_id	varchar	A universally unique identifier for an organization, assigned in the records source database.
group_public_id	varchar	A universally unique identifier for a group, assigned in the records source database.
display_name	varchar	The display name set for this organization.
slug	varchar	The name for the Organization within Snyk.
created	timestamp_ntz	When this record was created in Snyk.
deleted	timestamp_ntz	When this record was deleted from Snyk.
modified	timestamp_ntz	When this record was last modified within Snyk.
__updated_at	timestamp_ntz	When the data share data transformation last updated this record.

Projects

current version: v1.0

The PROJECTS table contains main attributes of Snyk Projects, as well as the related target. Its data can be utilized for performing aggregations of filters on the project or target levels, including based on project collections, project tags or specific repo branches (using target_ref).

Snyk Reports only presents monitored projects that were not deleted. To match your results with Snyk Reports, filter your query with IS_MONITORED = TRUE and DELETE IS NULL.

Column name	Data type	Description
public_id	varchar	A universally unique identifier for a project, assigned in the record's source database.
org_public_id	varchar	A universally unique identifier for an organisation, assigned in the record's source database.
group_public_id	varchar	A universally unique identifier for a group, assigned in the record's source database.
name	varchar	The name given to this project, when added to Snyk.
is_monitored	boolean	Whether this project is currently set to be actively monitored.
project_type	varchar	The scanning method to use for a particular Project, such as Static Application Security Testing (SAST) for scanning using Snyk Code, or Maven for a Maven project using Snyk Open Source. This is part of the configuration for scanning.
project_type_display_name	varchar	A display name Snyk assigned to internal project type values.
test_frequency	varchar	The frequency of testing for a given Project. For example, Daily, Weekly, and so on.
origin	varchar	The Origin defines the Target ecosystem, such as CLI, GitHub, or Kubernetes. Origins are a property of Targets.
target_ref	varchar	A reference that differentiates this project, for example, a branch name or version. Projects having the same reference can be grouped based on that reference.
target_runtime	varchar	The environment in which the Target is executed and run.
target_display_name	varchar	A display name for a project's target.
is_private_target	boolean	Whether the target's source is private or publicly reachable.
target_source_type	varchar	The hosting provider of a given target, for example, docker-hub, github, and so on.
target_source_type_display_value	varchar	A display value that represents the grouping for target sources, for example, Source Control, Container Registry, and so on.
target_upstream_url	varchar	The URL pointing to a target's upstream source, such as a URL for a GitHub repository.
criticalities	array	A project attribute that indicates business criticality. For example, low, medium, high, critical.
lifecycles	array	A project attribute, for example, production, development, sandbox.
environments	array	A project attribute, for example, frontend, backend, internal, external, mobile, saas, onprem, hosted, distributed.
project_collections	array	All Project collections to which this project has been added.
project_tags	array	All tags which have been assigned to this project.
project_owner_email	varchar	The email of the user assigned as the owner of this project.
project_owner_username	varchar	The username of the user assigned as the owner of this project.
created	timestamp_ntz	When this record was created in Snyk.
deleted	timestamp_ntz	When this record was deleted from Snyk.
modified	timestamp_ntz	When this record was last modified within Snyk.
__updated_at	timestamp_ntz	When the data share data transformation last updated this record.

Issues

current version: v1.0

The ISSUES table contains various attributes of Snyk Issues. Issues can be easily correlated with their originating project, target, org or group, utilizing the corresponding ID columns. On top of the issue's basic attributes, such as its introduction date, type, severity, score, etc., there are columns that elaborate on the vulnerability attributes, such as the CVSS score, EPSS Score, NVD Score, etc.

Querying the issues table allows:

• Concluding various metrics and KPIs, among issue backlog, aging, MTTR and SLA compliance.

• Visualizing trends of identified, ignored, resolved issues over time

• Prioritize issues based on multiple factors and considerations

If you would like to match your results with Snyk Reports, filter your query with DELETE IS NULL, as Snyk Reports don't present deleted issues.

computed_fixability indicates whether the issue can be fixed based on the vulnerability remediation paths, for example:

• Fixable: There is a fix for all the identified issues, meaning that all detailed paths have remediation.

• Partially fixable: The issue has upgradable paths, but not all detailed paths have remediation.

• No supported fix: The issue has no upgradable paths.

Column name	Data type	Description
id	varchar	A unique identifier, representing a unique instance of a given vulnerability in a project.
problem_id	varchar	Snyk Vulnerability database ID that uniquely identifies the vulnerability.
project_public_id	varchar	A universally unique identifier for a project, assigned in the record's source database.
org_public_id	varchar	A universally unique identifier for an organization, assigned in the record's source database.
group_public_id	varchar	A universally unique identifier for a group, assigned in the record's source database.
product_name	varchar	The Snyk Product which initially identified this issue.
problem_title	varchar	Name of the Snyk discovered vulnerability.
vuln_db_url	varchar	URL which directs to the Snyk's Public Vulnerability Database website.
issue_type	varchar	Indicates whether the issue is related to a vulnerability, license, or configuration.
issue_sub_type	varchar	A more granular variation of issue type.
issue_url	varchar	URL which directs to the given's project's instance of this vulnerability on the Snyk Website.
issue_status	varchar	Indicates whether the issue is open, resolved, or ignored.
issue_severity