Setup requirements for AWS CodePipeline
Last updated
Last updated
More information
Snyk privacy policy© 2024 Snyk Limited | All product and company names and logos are trademarks of their respective owners.
The Snyk integration for AWS CodePipeline will be discontinued
Action Required
In order to safeguard the security of our services and our customers, Snyk has begun the deprecation of its integration with AWS CodePipeline. To minimize disruption, we recommend that you transition to using AWS CodeBuild and the Snyk CLI as an alternative which will support the same use case and functionality.
Migration Timeline
Effective Oct 30th, 2024, you will no longer be able to add or modify the Snyk plug-in for new or existing pipelines. Existing pipelines will continue to work as-is for 6 months, though we recommend migrating to the new process as soon as possible. To avoid disrupting your CI/CD workflows, you must transition to the Snyk CLI before April 30, 2025. Please refer to the steps in this migration guide to use Snyk CLI with AWS CodeBuild.
We are confident that AWS CodeBuild and the Snyk CLI will meet your requirements.
Check if your project must be built before the scan in the CodePipeline. If the project needs to be built, you must add a CodeBuild step before the Snyk Step.
| Language | Project Type | Build Required | Notes |
|---|---|---|---|
Javascript
npm
No*
Build only required if no package-lock.json file present; run npm install to generate
Javascript
Yarn
No*
Build only required if no yarn.lock file present; run yarn install to generate
Java
Maven
Yes
Run mvn install before testing
Java
Gradle
No
.NET
Nuget
No*
Build only required if no packages.config file present
Python
Pip
No*
Build only required if missing a Snyk config file with the language-settings param
Python
Setup.py
Yes
Run pip install -e . before testing
Python
Poetry
No*
Build only required if no poetry.lock file present; run poetry lock to generate
Ruby
Bundler
No*
Build only required if no Gemfile.lock file present; run bundle install to generate
PHP
Composer
No*
Build only required if no composer.lock file present; run composer install to generate
Scala
SBT
No
Go
Go Modules
No
Swift/Objective-C
Cocoapods
No*
Build only required if no Podfile.lock file present; run pod install to generate