Skip to content
This repository was archived by the owner on Jun 10, 2019. It is now read-only.

Integrate Snyc for Vulnerability Tests #513

Closed
wants to merge 11 commits into from

Conversation

sethbergman
Copy link
Member

Description of changes

snyk documentation

tldr

A vulnerability scanner for dependencies in node and ruby apps!

Issue Resolved

Fixes #496

Need to look into tests... Feel free to jump in!

@sethbergman
Copy link
Member Author

This needs an API key for running the script at build time. It's free, you just have to sign up. I can do it for my own fork, but I thought I would make you aware of this. Thanks!

@sethbergman
Copy link
Member Author

@hollomancer
I just sent you an invite to get the api key from snyk. Let me know if you have any questions. 😄

@kylemh
Copy link
Member

kylemh commented Sep 29, 2017

I'd like @rickr or @hpjaj to weigh in on this, because I believe many Ruby developers have gems that do this exact task.

As for Node vulnerabiltiies? If we're keeping React updated, they'll do a much better job of handling security issues than snyk or we will ever do.

Essentially, if there's already a gem in place, this PR is unnecessary and so is #496

@kylemh
Copy link
Member

kylemh commented Oct 1, 2017

@sethbergman CI failed on this one. I'm going to close it.

@kylemh kylemh closed this Oct 1, 2017
@sethbergman sethbergman deleted the snyk branch October 3, 2017 18:46
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add snyk for dependency vulnerability checking
2 participants