Use the Snyk plugin to secure your Eclipse projects

Once the language server is downloaded and the authentication is completed, the plugin starts the workspace scan. You might notice a confirmation that a workspace scan is starting. Alternatively, you can trigger a workspace scan from your project's context menu, or from the Snyk View.

Starting workspace scan

All of the issues found by Snyk are now integrated natively with Eclipse flows. Issues are shown in the Problems tab as shown in the following screenshot. There is a squiggly line indicating the issue while you code plus gutter icons to indicate where the issue is.

Eclipse Problems tab

Continue by following the instructions on the page for the type of scan you are doing:

• SAST scanning results (SAST, Snyk Code)

• Misconfiguration scanning results (Snyk Infrastructure as Code)

• Third party dependency scanning (SCA, Snyk Open Source)