Access requirements

When you are using Snyk applications like the CLI or IDE integrations, certain local and remote resources must be accessible. This documentation explains how to harden your system without affecting Snyk functionality.

Local filesystem

The required filesystem access may vary by product.

• CACHE_PATH (Read,Write,Execute)

  • Windows: C:\\Users\\<USERNAME>\\AppData\\Local\\snyk

  • Linux/Alpine: /home/<USERNAME>/.cache/snyk

  • macOS: /Users/<USERNAME>/Library/Caches/snyk

• CONFIG_PATH (Read,Write)

  • Windows: %USERPROFILE%\\.config\\configstore

  • Linux: $HOME/.config/configstore

  • macOs: $HOME/.config/configstore

Network resources

Required

• api.<SNYK_INSTANCE>.io:443

• app.<SNYK_INSTANCE>.io:443

Optional

• static.snyk.io:443 (depending on used features)

• snyk.io:443 (depending on used features)

• *.sentry.io:443 (error reporting)

• *.amplitude.com:443 (analytics)