Snyk Code - Additional resources
Watch this live demo of Snyk Code to see how it integrates into the Snyk Cloud Native Application Security platform to help developers build software securely across the entire stack, including the code, open source, containers, Kubernetes, and IaC.
This video explores how to get started with Snyk Code. It looks at Snyk Code language and framework support, how to enable Snyk Code in the Web UI, and best practices for using Snyk Code IDE plugins.
View this introduction to see how Snyk helps software-driven businesses develop fast and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI, and more.
This video shows that Snyk Code is developer-first, embedding SAST as part of the development process, enabling developers to build software securely during development, and not trying to find and fix problems after the code is compiled. Snyk Code works in the IDEs and SCMs developers use to build and review software, and provides fast, actionable, meaningful results to fix issues in real-time.
This blog post looks at the first year of Snyk Code and the future of code security with Snyk.
This blog post discusses how the strategic alliance between Snyk and StackHawk brings modern, developer-centric perspectives to application security to provide a holistic, scalable approach to securing the SDLC in development.
This post uses the example of a new Javascript vulnerability called prototype pollution to walk through how the rule maintenance features of Snyk Code help developers and security professionals protect their application.
This post looks at why considering SAST and SCA as part of a combined approach is the right approach and how to implement both without creating sprawl.
Starting in early 2021, Snyk Code became available as a freemium offering for Snyk users. Snyk Code helps developers quickly and accurately find, prioritize, and fix security flaws in proprietary code. This post discusses how, with detailed remediation guidance at every stage of the software development lifecycle (SDLC), from the developer’s environment (IDE) to continuous integration and development (CI/CD) pipelines, Snyk Code revolutionizes static application security testing (SAST).
If every vulnerability seems equally critical, engineers would get overwhelmed and probably waste time on the wrong issues. This is why it’s important for developer security tools to provide clear and simple prioritization functionality. As you’ve likely noticed, Snyk Code provides a Priority Score on the top right corner of the overview panel. This post discusses the Priority Score.
Snyk Code is the static application security testing (SAST) solution from Snyk, and it introduces some revolutionary technologies into the SAST space. It is based on the research and technologies developed by a spin-off of the ETH (Zurich/Switzerland), DeepCode, which joined Snyk at the end of 2020. This post is about these technologies and how Snyk not only gives back to the open-source community but promotes and works with the academic community in the field of static program analysis.
When scanning your code, Snyk Code might find all kinds of security vulnerabilities. While Snyk Code is fast, accurate, and rich in content, sometimes there is the need to suppress specific warnings. Typical example use cases arise in test code when you explicitly use hard-coded passwords to test your routines, or you know about an issue but decide not to fix it. For this situation, Snyk Code, as well as the other Snyk platform products, provides the ability to ignore suggestions.
There is more to ignore than you think. This post explores how you ignore an issue and takes a look behind the scenes at how Snyk implemented the feature.