Company
Date Published
Author
Frank Fischer
Word count
944
Language
English
Hacker News points
None

Summary

Snyk Code provides a feature called "Ignore" that allows users to suppress specific security warnings, such as when testing with hard-coded passwords or deciding not to fix an issue. The Ignore feature can be accessed through the Snyk Code web UI and allows users to classify whether the issue is to be marked as not vulnerable, ignored temporarily, or ignored permanently, setting a timer for how long to ignore the issue. However, traditional systems that rely on source code comments to identify issues with unique hashes are flawed, as changing the text changes the hash, leading to incorrect matches and ignoring similar reports. Snyk Code implements its Ignore feature by using an intermediate representation of the input code to generate a hash, allowing it to recognize the same issue even when code is refactored or renamed. The new implementation loosens exact match requirements, reducing irrelevant reappearances of reports.