Company
Date Published
Author
Frank Fischer
Word count
1619
Language
English
Hacker News points
None

Summary

The Snyk Code CLI is now available in public beta, allowing developers to easily integrate Static Application Security Testing (SAST) tools into their DevOps pipeline. The CLI supports real-time scanning of code with high accuracy, and can be triggered automatically as part of the CI/CD process. Developers can scan legacy code or perform a code review using the web-based UI. The CLI provides a data format called SARIF, which contains detailed information about vulnerabilities found in the code, including severity levels and recommended remediations. The CLI also supports filtering on severity level using the parameter --severity-threshold. To get started with Snyk Code, developers need to have the latest Snyk CLI installed, Snyk Code enabled for their org, and a Snyk Code-activated account on Snyk.