Snyk for Scala
The following summarizes the features of Snyk for Scala by package manager. In addition to these features, Snyk may offer more functionality related to the specific integration configurations.
Snyk scans Scala projects by running
sbtplugins or examining your
build.sbtand compares the versions of every direct and transitive dependency in your project against Snyk's Maven vulnerability database.
To do this, add the plugin dependency to
To add the plugin to a single Project only, update the
project/plugins.sbtof your Project instead.
Regardless of which
sbtversion you are using, you must use the following command in the relevant
addSbtPlugin("net.virtual-void" % "sbt-dependency-graph" % "0.10.0-RC1")
To test your Scala Projects using
sbtas a package manager, Snyk analyzes your
build.sbtfile. To ensure that this works properly, you must have this file in your repository before importing your projects.