Snyk integration

What is Snyk?

Snyk is a security management platform for developers that helps them detect and fix vulnerabilities in applications.

By integrating Buddy with Snyk you can proactively prevent security issues in your application, and contribute to maintaining good quality and safety of the source code.

Adding Snyk CLI action into your CI/CD pipeline allows you to continuously monitor your project dependencies and send alerts whenever a security issue or vulnerability is discovered.

Image loading...Pipeline example for Snyk integration

Setting up Snyk integration

  1. Go to the Integrations tab and click New integration

  2. Look up and click Snyk:

Image loading...Snyk integration selection

  1. A configuration window will show up:

Image loading...Snyk integration configuration

Here, you have to provide:

  • Integration name
  • Customer token
Hint
You can adjust the default settings of your integration's privacy (i.e. who can use it and where) in the Sharing tab.
  1. Once done, click New integration to finish configuration.

Obtaining Snyk customer token

  1. Go to your Snyk account at: https://app.snyk.io/account
  2. Copy the Key from the General tab:

Image loading...Snyk auth token location

Once you have successfully configured the integration, you can add the Snyk CLI action into your pipeline and stay ahead of security concerns!

Hint
Read how to configure Snyk with YAML and Snyk POST Parameters.

Last modified on Sep 23, 2024