Snyk is a platform for testing software code. The Uleska Snyk tool supports vulnerability checking using Snyk's platform and their repository of vulnerable open-source libraries.
|Security Stage||SCA (Software Composition Analysis)|
|1||You'll need a Snyk account and an API token for that account|
Adding Snyk to your set of security tests is simple. You will add this testing tool to a version (security stage) that is set up to run static code analysis tests.
You will need to add Snyk as a New Connection in your Uleska system:
Click the blue cog and select your Snyk connection from the "Connection name" drop-down. You can also specify a number of other optional configuration values here such as:
Now, any time you click 'Test Now' for that version, or make a request over the Uleska API or CLI for that stage, the Snyk tool will be included to test your code and add any results to your vulnerabilities list.