SAST scanning results (SAST, Snyk Code)
PreviousUse the Snyk plugin to secure your Eclipse projectsNextMisconfiguration scanning results (Snyk Infrastructure as Code)
Last updated
Last updated
In the Eclipse plugin version 2.0.0 and later, Snyk has enhanced integrations with the native flows of Eclipse: inline code highlights with displays of information about the issue on hover, and Eclipse Problems integrations. The following illustrates all of these for a high-severity security vulnerability found in a js file.
The security vulnerability is highlighted in your code, with the underline color and icon adjacent to the line number indicating the severity of the issue. You can see the vulnerability ID and detailed information by hovering over the highlighted code. The hover information is limited to JavaEditor and GenericEditor, the latter being the default editor for plugins like Wild Web Developer.
Vulnerabilities are displayed in the Problems view, which allows for filtering and grouping issues. The line containing the issue is shown in the Location column. You can navigate to the issue in the code by clicking the issue in the list of problems.
In addition to this, the Snyk Results view offers detailed issue descriptions, including the Data Flow and Remediation suggestions. In this view, you can start and stop scans, filter issues, and more.
To filter issues in the Snyk Results view, click the three vertical dots menu at the top right of the view, and then select any combination of options from the Severity, Snyk Product, Issues Status, and Fixability submenus to customize your filter.
