The Snyk security integration is free and easy to set up with just a few clicks inside the Bitbucket Cloud product. For the first time, developers can consume information that was previously only available inside Snyk now within Bitbucket Cloud. Snyk enables developers to see new vulnerabilities as they emerge and implement fixes early and quickly in the process.
In this post we show how easily you can integrate Snyk into Bitbucket Cloud
Steps
Note: For the following to work you have to integrate Bitbucket Cloud with the Snyk App as per this link
1. Once logged into Bitbucket Cloud navigate to your "Workplace Settings" and authenticate with Snyk as shown below.
2. Next select the repository you wish to use as shown below.
3. You should see a "Snyk" tab on the left hand side click on this and then click on "Import this repository" as shown below.
4. In a couple of minutes or less you should see a "Snyk" overview report as per below.
5. Click on "pom.xml" to get more information as shown below. Here we get a list of all Vulnerabilities as per a scan of the package manifest file "pom.xml" in this example.
6. On the top of this page you can directly go to the project page on "Snyk App" by clicking on "Visit Snyk" as shown below.
It's as simple as that!
More Information
Demo Video
Snyk provides native integration for Atlassian Bitbucket Cloud security
https://snyk.io/blog/snyk-native-integration-atlassian-bitbucket-cloud-security/?utm_campaign=PR-LH-Bitbucket-2021&utm_medium=Social&utm_source=Linkedin-Organic
https://snyk.io/blog/snyk-native-integration-atlassian-bitbucket-cloud-security/?utm_campaign=PR-LH-Bitbucket-2021&utm_medium=Social&utm_source=Linkedin-Organic
No comments:
Post a Comment