Migrating to Bitbucket Pipelines v1.0.0

When you are upgrading from < 1.0.0 to 1.0.0+, make the following changes in your configuration:

• Use tags supported by Snyk images for the LANGUAGE variable instead of tags supported by Snyk CLI Docker images.

• Alternatively, you can provide your own custom image using the new SNYK_BASE_IMAGE variable

Users can now define custom images in v1.0.0

Basic app dependencies scan example

This example uses Snyk to scan a Node.js application and break the build if any vulnerabilities are found.

snyk/snyk-scan:1.0.0

script:
  - npm install

  - npm test

  - pipe: snyk/snyk-scan:1.0.0
    variables:
      SNYK_TOKEN: $SNYK_TOKEN
      LANGUAGE: "node" # language tag is "node"

  - npm publish

snyk/snyk-scan:0.7.0

script:
  - npm install

  - npm test

  - pipe: snyk/snyk-scan:0.7.0
    variables:
      SNYK_TOKEN: $SNYK_TOKEN
      LANGUAGE: "npm" # language tag is "npm"

  - npm publish

Equivalent Snyk images

The table that follows lists the Snyk CLI Docker images used in Bitbucket Pipelines < 1.0.0 and the equivalent Snyk images that can be used in Bitbucket Pipelines > 1.0.0.

Node.js 14 is installed in all Snyk CLI Docker images for the purpose of installing the CLI. In comparison, NodeJS is installed only in Snyk images containing the node tag.

Note that the images will not be exactly like-for-like. Properties, including the base image, the installed Snyk CLI version, and others, will be different.

However, for the purpose of Bitbucket Pipelines, they are functionally equivalent.

Where the supported language or framework has reached end of life, it is highly recommended that you use your own user-defined custom images with newer versions of the language or framework that are still supported by the vendor.

Language / Tooling	Snyk CLI Image	Snyk Image
PHP / Composer	1*.*-composer composer	snyk/snyk:composer
Docker	1.*.*-docker docker	snyk/snyk:docker-latest snyk/snyk:docker
Java / Gradle	1.*.*-gradle-* gradle-* gradle-*_java*	snyk/snyk:gradle snyk/snyk:gradle-jdk11 snyk/snyk:gradle-jdk12 snyk/snyk:gradle-jdk13 snyk/snyk:gradle-jdk14 snyk/snyk:gradle-jdk16 snyk/snyk:gradle-jdk17 snyk/snyk:gradle-jdk18 snyk/snyk:gradle-jdk19 snyk/snyk:gradle-jdk20 snyk/snyk:gradle-jdk21 snyk/snyk:gradle-jdk8
Java / Maven	1*.*-maven-* maven-* maven-*_java*	snyk/snyk:maven snyk/snyk:maven-3-jdk-11 snyk/snyk:maven-3-jdk-17 snyk/snyk:maven-3-jdk-20 snyk/snyk:maven-3-jdk-21 snyk/snyk:maven-3-jdk-22 snyk/snyk:maven-3-jdk-8
JS (Node) / NPM	1*.*-npm npm	snyk/snyk:node snyk/snyk:node-18 snyk/snyk:node-20 snyk/snyk:node-22
.Net / Nuget	1*.*-nuget nuget	snyk/snyk:dotnet snyk/snyk:dotnet-8.0
Python	1*.*-python-* python-*	snyk/snyk:python snyk/snyk:python-3.8 snyk/snyk:python-3.9 snyk/snyk:python-3.10 snyk/snyk:python-3.11 snyk/snyk:python-alpine
Ruby / Ruby Gems	1*.*-rubygems rubygems	snyk/snyk:ruby snyk/snyk:ruby-3.3 snyk/snyk:ruby-alpine
Scala / SBT	1*.*-sbt-* sbt-*	snyk/snyk:sbt1.10.0-scala3.4.2