Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
168 commits
Select commit Hold shift + click to select a range
dcdb9e8
feat: pass pruneRepeatedSubdependencies flag to registry
bdemeo12 Nov 5, 2025
b9921bf
test: add unit tests for pruneRepeatedSubdependencies flag
bdemeo12 Nov 5, 2025
8724e26
fix: lint
bdemeo12 Nov 6, 2025
1967f99
chore: update os cli extension
nicarl Nov 12, 2025
47d589a
Merge pull request #6301 from snyk/feat/update-cli-extension-12-11-25
nicarl Nov 13, 2025
0e8633b
feat: enable reachability for prodsec scans
nicarl Nov 13, 2025
c323133
Merge pull request #6304 from snyk/feat/enable-reachability-for-prods…
PeterSchafer Nov 13, 2025
cbfbba4
chore: upgrade sbom extension to support reachability filters
attriaayush Nov 13, 2025
5e92978
Merge pull request #6306 from snyk/chore/upgrade-sbom-extension-for-r…
attriaayush Nov 13, 2025
c1af642
chore: update os flow extension
nicarl Nov 13, 2025
fda95e1
Merge pull request #6307 from snyk/feat/update-extension-13-11-25
nicarl Nov 13, 2025
934ffce
Merge branch 'main' into CN-269/prune-repeated-sub-deps-for-container…
bdemeo12 Nov 13, 2025
cc2c3dd
Merge pull request #6285 from snyk/CN-269/prune-repeated-sub-deps-for…
bdemeo12 Nov 14, 2025
2ce49d1
chore: extend suppression support for UFM presenter
CatalinSnyk Nov 14, 2025
949f882
Merge pull request #6310 from snyk/chore/CLI-1253_UFM_extend_ignores
PeterSchafer Nov 14, 2025
0b02a2d
chore: update os flows cli extension
nicarl Nov 14, 2025
fc6977d
Merge pull request #6309 from snyk/chore/update-os-cli-extension-14-1…
nicarl Nov 14, 2025
6977004
fix: [OSM-3066] support for poetry dev deps
MarcusArdelean Nov 13, 2025
98f5ade
fix: [OSM-3066] test for poetry --dev with no dev-dependency group
MarcusArdelean Nov 13, 2025
91d4076
Merge pull request #6303 from snyk/fix/OSM-3066/support-for-poetry-de…
MarcusArdelean Nov 17, 2025
0b34409
chore: improve ufm sarif rendering including ignores
PeterSchafer Nov 17, 2025
d84632e
Merge pull request #6311 from snyk/chore/CLI-1253
PeterSchafer Nov 17, 2025
bf53735
docs: synchronizing help from snyk/user-docs
team-cli-bot Nov 17, 2025
4c5c452
Merge pull request #6312 from snyk/docs/automatic-gitbook-update-cli-…
PeterSchafer Nov 17, 2025
0a54c31
chore: upgrade os extensions to allow ignore type to be mapped
attriaayush Nov 17, 2025
a52dcc6
chore: automatic integration of language server 2cc554ec87f0f1b1f8005…
team-ide-user Nov 17, 2025
dd95065
Merge pull request #6313 from snyk/chore/upgrade-os-extension-ignore-…
nicarl Nov 17, 2025
3dda1d5
Merge branch 'main' into chore/automatic-upgrade-of-ls
rrama Nov 17, 2025
a4619d2
Merge pull request #6315 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Nov 17, 2025
2f58df1
chore: upgrade os extensions to allow nil actions on the fix
attriaayush Nov 17, 2025
536c8c4
Merge pull request #6317 from snyk/chore/upgrade-os-extension-fix-nil…
nicarl Nov 17, 2025
af6c0bc
chore: automatic integration of language server c23fd4ea5f4e025ea40a9…
team-ide-user Nov 18, 2025
ed8c01d
Merge pull request #6321 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Nov 18, 2025
76a0b6b
chore: extend TestResult with extra medatadata for UFM SARIF presenta…
CatalinSnyk Nov 19, 2025
f77f976
Merge pull request #6323 from snyk/chore/CLI-1211_extend_UFM_test_result
PeterSchafer Nov 19, 2025
eaf50bb
fix: remediation summary for multipe dependency path
nicarl Nov 19, 2025
6126456
Merge pull request #6324 from snyk/fix/rendering-of-fix-advice-in-os-…
nicarl Nov 19, 2025
ec1262e
fix: show full file path in Gradle sarif output
thomasschafer Nov 12, 2025
5bce491
Merge pull request #6305 from snyk/fix/show-full-file-path-in-gradle-…
thomasschafer Nov 20, 2025
e716697
chore: update studio-mcp ext
ShawkyZ Nov 20, 2025
428ca4a
Merge pull request #6325 from snyk/chore/update-mcp-ext
ShawkyZ Nov 21, 2025
c145efc
feat: improved PackageURLs in SBOM documents for go.mod projects
mcombuechen Nov 21, 2025
fa2a3e2
feat: upgrade snyk-go-plugin, better Go purls (#6326)
mcombuechen Nov 24, 2025
e8bdac6
fix: command args when invoking `monitor` with `--reachability`
paulrosca-snyk Nov 24, 2025
7c7249a
Merge pull request #6329 from snyk/fix(monitor)/double-dash-args
paulrosca-snyk Nov 24, 2025
36efafe
chore: update snyk-docker-plugin
bdemeo12 Nov 21, 2025
ebb41d9
Merge pull request #6328 from snyk/fix/extractor-handles-empty-history
bdemeo12 Nov 24, 2025
a71c928
fix: include orgID in the OS monitor api reqs
danlucian Nov 18, 2025
e30bd7d
Merge pull request #6318 from snyk/fix/include-orgID-in-the-os-monito…
danlucian Nov 25, 2025
d542db8
chore: remove govendor mentions
snyk-will Nov 24, 2025
a262011
Merge pull request #6330 from snyk/chore/remove-govendor-mentions
snyk-will Nov 25, 2025
da21315
feat(reachability): improve upload speed
paulrosca-snyk Nov 25, 2025
9b744cd
Merge pull request #6333 from snyk/feat(reachability)/improve-upload-…
paulrosca-snyk Nov 26, 2025
485ae55
chore: automatic integration of language server d999dd468f2e5815fb9f9…
team-ide-user Nov 26, 2025
35a6102
Merge pull request #6334 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Nov 27, 2025
806449b
fix: Fix incorrect windows test sharding
PeterSchafer Sep 27, 2025
f7308c1
Merge pull request #6256 from snyk/fix/CLI-1178_win_shards
thisislawatts Nov 27, 2025
7dce771
chore(ci): remove unused iac-cli-alert
thisislawatts Nov 14, 2025
281092b
chore(ci): drop unused iac-smoke-tests
thisislawatts Nov 14, 2025
e986b61
Merge pull request #6308 from snyk/chore/drop-unused-iac-cli-alert
thisislawatts Nov 27, 2025
27cc01d
fix: bump redteaming
pkey Nov 24, 2025
0e933a6
Merge pull request #6332 from snyk/fix/upgrade-redteam
pkey Nov 27, 2025
293d9b1
fix: pnpm workspaces respect exclude
snyk-will Nov 24, 2025
25539c2
Merge pull request #6335 from snyk/fix/pnpm-workspaces-respect-exclude
calhar-snyk Nov 27, 2025
096e02b
chore(ci): update base url for go binary download
thisislawatts Dec 2, 2025
9c438ee
Merge pull request #6340 from snyk/chore/adjust-go-binary-download-path
PeterSchafer Dec 2, 2025
a16b853
fix: file filtering rules for native code
j-luong Nov 17, 2025
f166293
Merge pull request #6316 from snyk/fix/cli-1220_fileFilterInvalidRule
j-luong Dec 2, 2025
e185c92
fix(dependencies): Upgrade dependencies to address multiple issues
PeterSchafer Dec 2, 2025
6bccbd4
Merge pull request #6344 from snyk/fix/CLIA-1000_deps_upgrade
PeterSchafer Dec 3, 2025
4a213d7
test: check for available port
thisislawatts Nov 27, 2025
2354c45
chore(deps): correct as devdep
thisislawatts Dec 2, 2025
5de76c2
test: adopt new helper
thisislawatts Dec 3, 2025
356b140
test: mark getServerPort as deprecated
thisislawatts Dec 3, 2025
f30eced
Merge pull request #6337 from snyk/chore/test-improve-reliability-of-…
PeterSchafer Dec 3, 2025
1d25255
chore: automatic integration of language server 659b8a92f4cd01ef43022…
team-ide-user Dec 2, 2025
65dfdb1
Merge pull request #6341 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Dec 3, 2025
3fd2979
fix: Fix rendering conflicts
PeterSchafer Nov 19, 2025
a4626fc
Merge pull request #6338 from snyk/chore/CLI-1248_global_writers
PeterSchafer Dec 4, 2025
d0bdba1
fix: update os flows CLI extension
nicarl Dec 4, 2025
0e50fae
Merge pull request #6348 from snyk/fix/update-os-cli-extension-04-12-…
nicarl Dec 4, 2025
c3aa287
chore: add user-journey test for UFM SARIF rendering
CatalinSnyk Dec 4, 2025
343ec4b
Merge pull request #6350 from snyk/chore/CLI-1270_user_journey_UFM_sa…
CatalinSnyk Dec 4, 2025
9b2ee6e
feat: container scan support for cgo and stripped Go binaries
adrobuta Dec 4, 2025
1d46380
Merge pull request #6353 from snyk/feat/container-cgo-stripped-go-bin…
adrobuta Dec 9, 2025
350d2f1
chore: restrict ls protocol version determination to first line
bastiandoetsch Dec 9, 2025
95c3d2b
Merge pull request #6362 from snyk/fix/build-script
bastiandoetsch Dec 9, 2025
b2c71ea
Merge remote-tracking branch 'origin/main' into chore/sync-main-with-…
j-luong Dec 9, 2025
0d121df
chore: use new test-api version [PS-86]
mihai-snyk Dec 9, 2025
765e53a
Merge pull request #6363 from snyk/chore/PS-86/update-os-flows-ext
PeterSchafer Dec 9, 2025
b23c280
Merge remote-tracking branch 'origin/main' into chore/sync-main-with-…
j-luong Dec 9, 2025
8de4d26
chore: automatic integration of language server de8f157ce95d3b10560eb…
team-ide-user Dec 9, 2025
019bb52
Merge pull request #6358 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Dec 9, 2025
201b1f3
feat: add --all-projects-support for WIP uv integration
thomasschafer Dec 9, 2025
f33c790
Merge pull request #6366 from snyk/chore/add-all-projects-support-for…
thomasschafer Dec 10, 2025
034d7d9
fix: bump redteaming
pkey Dec 9, 2025
d6f5896
Merge pull request #6365 from snyk/fix/update-redteam
pkey Dec 11, 2025
ccc80f9
chore: automatic integration of language server ff4aa3f0d1152c8d7a5c4…
team-ide-user Dec 11, 2025
81dc211
Merge pull request #6368 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Dec 12, 2025
9c4713c
fix: add missing spaces to errors
thomasschafer Dec 12, 2025
13e2f10
Merge pull request #6371 from snyk/fix/add-missing-spaces-to-errors
PeterSchafer Dec 12, 2025
1618a12
chore: upgrade os extensions to add support for test facts in sbom test
attriaayush Dec 11, 2025
ca2c89a
Merge pull request #6369 from snyk/chore/uprade-os-flows-extension-in…
attriaayush Dec 12, 2025
1c486f7
Merge remote-tracking branch 'origin/main' into chore/sync-main-with-…
j-luong Dec 12, 2025
9337b77
Merge pull request #6361 from snyk/chore/sync-main-with-v1.1301.1
j-luong Dec 12, 2025
c3b88d7
chore: add ufm human readable renderer
PeterSchafer Dec 11, 2025
3b698c6
Merge pull request #6373 from snyk/chore/CLI-1254_ufm_human
PeterSchafer Dec 12, 2025
bc19e7c
docs: synchronizing help from snyk/user-docs
team-cli-bot Dec 15, 2025
9fbc08a
Merge pull request #6378 from snyk/docs/automatic-gitbook-update-cli-…
PeterSchafer Dec 15, 2025
d24a44e
chore: automatic integration of language server ba84c9f012828a4ed598c…
team-ide-user Dec 15, 2025
9c963e2
Merge pull request #6379 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Dec 15, 2025
7fe5046
fix: fix typo in flag combination error
thomasschafer Dec 15, 2025
d9a2f77
Merge pull request #6381 from snyk/fix/fix-typo-in-flag-validation
PeterSchafer Dec 15, 2025
ec6417b
test: drop shellspec based tests
thisislawatts Oct 8, 2025
b6b472b
Merge pull request #6383 from snyk/test/drop-regression-tests-CLI-1162
thisislawatts Dec 16, 2025
766558f
Merge branch 'release-candidate' into chore/CLI-1291_sync_main
PeterSchafer Dec 16, 2025
ac91478
chore: go mod tidy
PeterSchafer Dec 16, 2025
1515322
Merge pull request #6386 from snyk/chore/CLI-1291_sync_main
PeterSchafer Dec 16, 2025
54b8376
fix: adding mcp-scan cli extension [SOSE-25]
aarlaud Dec 17, 2025
d992b42
Merge pull request #6336 from snyk/feat/add-mcp-scan-workflow
aarlaud Dec 17, 2025
cf32e52
fix(cliv2): respect subprocess env config
bastiandoetsch Dec 17, 2025
83662cd
Merge pull request #6387 from snyk/feat/use-thread-safe-environment-w…
bastiandoetsch Dec 17, 2025
47db111
feat: add pnpm lockfile support for container scanning
parker-snyk Dec 11, 2025
08313d0
feat: add pnpm lockfile support for container scanning #6370 CN-552
parker-snyk Dec 17, 2025
52e6e26
chore: ensure to use latest gaf version
PeterSchafer Dec 17, 2025
bcef3ae
Merge pull request #6393 from snyk/chore/update_gaf
PeterSchafer Dec 17, 2025
9336b0a
feat: route OS tests via new extension when FF set
nicarl Dec 17, 2025
ccb3d48
Merge pull request #6390 from snyk/feat/os-flow-extension-ff
nicarl Dec 17, 2025
814118a
feat: update GAF and os cli extension
nicarl Dec 18, 2025
4da0d8b
Merge pull request #6394 from snyk/feat/update-gaf-os-cli-extension
nicarl Dec 18, 2025
f214c94
chore: automatic integration of language server 8c5878cbac7d18bf8e110…
team-ide-user Dec 18, 2025
22eec21
Merge pull request #6396 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Dec 18, 2025
65ddf5b
fix: render uv errors correctly
thomasschafer Dec 18, 2025
fec68c6
Merge pull request #6397 from snyk/fix/render-uv-errors-correctly
thomasschafer Dec 18, 2025
66fbb50
fix: do not exit code 1 with invalid glibc
j-luong Nov 26, 2025
ca11db1
fix: move test case that should fail validation
PeterSchafer Dec 23, 2025
08bc40f
Merge pull request #6342 from snyk/fix/cli-1230_glibcChecker
j-luong Jan 5, 2026
8d0f4e2
fix: test by increasing expiry date
PeterSchafer Jan 5, 2026
8d9ea75
Merge pull request #6410 from snyk/fix/cli-pipeline
PeterSchafer Jan 5, 2026
1353a5f
fix: skips glibc checks for linuxstatic builds
j-luong Jan 5, 2026
45075e3
Merge pull request #6409 from snyk/fix/cli-1306_glibc_linuxstatic
PeterSchafer Jan 5, 2026
dae56aa
feat: support for OCI images with manifests missing platform fields
adrobuta Dec 19, 2025
6ae670d
Merge pull request #6401 from snyk/fix/container-oci-image-no-platform
SteveShani Jan 6, 2026
a28c948
chore: improve UFM SARIF rendering for other finding types
CatalinSnyk Dec 19, 2025
cf15b7c
chore: Introduce tip to specify remote-repo-url
PeterSchafer Jan 6, 2026
9c45cf2
Merge pull request #6402 from snyk/chore/CLI-1287_improve_UFM_SARIF
PeterSchafer Jan 6, 2026
4935cd5
feat: sbom traffic flows through os flows extension
attriaayush Dec 19, 2025
4f28ed4
Merge pull request #6400 from snyk/feat/sbom-test-with-reachability
attriaayush Jan 6, 2026
cc78694
fix(mcp): add rule file to .gitignore if not previously ignored
ShawkyZ Jan 7, 2026
162202e
Merge pull request #6414 from snyk/chore/update-mcp-ext
ShawkyZ Jan 7, 2026
d90b54e
feat: add PackageURL information to go.mod dependency graphs
mcombuechen Dec 17, 2025
319ff4f
Merge pull request #6388 from snyk/feature/UNIFY-1048-gomodules-purls
mcombuechen Jan 7, 2026
d4afe60
fix: update snyk-docker-plugin to v8.15.1
adrobuta Dec 24, 2025
4303ebf
fix: update snyk-docker-plugin to v8.15.2
parker-snyk Jan 7, 2026
237a4f5
fix: nodejs transitive with a top level alias but transitive it not
rdghe Dec 9, 2025
fe2c4a1
Merge pull request #6364 from snyk/fix/nodejs-transitive-with-a-top-l…
james-snyk Jan 8, 2026
72acfd6
chore: move exit code mapping to a central location
PeterSchafer Jan 6, 2026
d8fed82
feat: handle aibom error exit code
PeterSchafer Jan 7, 2026
22772d4
Merge pull request #6411 from snyk/chore/CLI-1297_exitcode_mapping
j-luong Jan 8, 2026
071de93
chore: automatic integration of language server b70c950dda41bbb323f80…
team-ide-user Jan 2, 2026
bb33e2d
chore: automatic integration of language server 39b92d5421215ca267258…
team-ide-user Jan 8, 2026
bb0825e
Merge pull request #6416 from snyk/chore/automatic-upgrade-of-ls
Team-Hammerhead Jan 8, 2026
13cb05f
chore: bump os-flows + uv acceptance test
snyk-will Jan 6, 2026
07e643f
Merge pull request #6413 from snyk/chore/bump-os-uv-acceptance
snyk-will Jan 8, 2026
9fd6f84
feat: sbom test support deb, apk and rpm
attriaayush Jan 8, 2026
d5ea931
Merge pull request #6419 from snyk/chore/bump-os-extension
attriaayush Jan 8, 2026
5770d53
docs: update release notes
PeterSchafer Jan 8, 2026
2244f89
chore: Update Release Notes
PeterSchafer Jan 8, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
60 changes: 14 additions & 46 deletions .circleci/config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -216,6 +216,9 @@ commands:
- ~\AppData\Local\Temp\chocolatey
- install-deps-python:
os: win
- run:
name: Install uv
command: pip install uv

install-deps-windows-signing:
steps:
Expand Down Expand Up @@ -300,6 +303,8 @@ commands:
command: |
sudo apt-get update
sudo apt-get install xdg-utils docker.io -y
curl -LsSf https://astral.sh/uv/install.sh | sh
echo 'export PATH="$HOME/.local/bin:$PATH"' >> $BASH_ENV

install-deps-python:
parameters:
Expand Down Expand Up @@ -334,7 +339,7 @@ commands:
parameters:
items:
type: string
default: go gradle python pipenv elixir composer gradle@9 maven sbt dotnet
default: go gradle python pipenv elixir composer gradle@9 maven sbt dotnet uv
steps:
- run:
name: Installing Rosetta
Expand Down Expand Up @@ -385,6 +390,8 @@ commands:
wget https://services.gradle.org/distributions/gradle-9.0.0-bin.zip -O /tmp/gradle.zip && \
unzip -d /usr/local /tmp/gradle.zip && \
ln -s /usr/local/gradle-9.0.0/bin/gradle /usr/local/bin
wget -qO- https://astral.sh/uv/install.sh | sh
ln -s $HOME/.local/bin/uv /usr/local/bin/uv

failed-release-notification:
steps:
Expand Down Expand Up @@ -641,20 +648,6 @@ workflows:
requires:
- prepare-build

- regression-tests:
name: regression-tests
context:
- team_hammerhead-cli
- devex_cli_docker_hub
filters:
branches:
ignore:
- main
- '/release.*/'
requires:
- build linux amd64
test_snyk_command: ./binary-releases/snyk-linux

- acceptance-tests:
name: acceptance-tests linux static arm64
go_target_os: linux
Expand Down Expand Up @@ -832,6 +825,7 @@ workflows:
install_deps_extension: windows-full
dont_skip_tests: 0
shards: 8
shard_calc_cmd: '$([int]$env:CIRCLE_NODE_INDEX + 1)'
pre_test_cmds: Import-Module $env:ChocolateyInstall\helpers\chocolateyProfile.psm1; RefreshEnv

- sign:
Expand Down Expand Up @@ -1261,6 +1255,7 @@ jobs:
open-source-additional-arguments: --exclude=test,dist
iac-scan: disabled
release-branch: main
open-source-scan-reachability: true

docs-only-check:
executor: docker-amd64
Expand Down Expand Up @@ -1446,6 +1441,9 @@ jobs:
shards:
type: integer
default: 4
shard_calc_cmd:
type: string
default: '$(expr $CIRCLE_NODE_INDEX + 1)'
executor: << parameters.executor >>
parallelism: << parameters.shards >>
environment:
Expand Down Expand Up @@ -1474,7 +1472,7 @@ jobs:
no_output_timeout: 30m
command: |
<< parameters.pre_test_cmds >>
npm run test:acceptance -- --selectProjects coreCli --shard=$(expr $CIRCLE_NODE_INDEX + 1)/<< parameters.shards >>
npm run test:acceptance -- --selectProjects coreCli --shard=<< parameters.shard_calc_cmd >>/<< parameters.shards >>
environment:
TEST_SNYK_FIPS: << parameters.fips >>
TEST_SNYK_COMMAND: << parameters.test_snyk_command >>
Expand All @@ -1486,36 +1484,6 @@ jobs:
- store_artifacts:
path: test/reports

regression-tests:
parameters:
test_snyk_command:
type: string
default: ./binary-files/snyk-linux
executor: docker-amd64
# working_directory: /mnt/ramdisk/snyk
steps:
- prepare-workspace
- run:
name: Install ShellSpec Deps
command: |
./test/smoke/install-shellspec.sh --yes
sudo ln -s ~/.local/lib/shellspec/shellspec /usr/local/bin/shellspec
- run:
name: Installing test fixture dependencies
working_directory: ./test/fixtures/basic-npm
command: npm i
- run:
name: Installing Snyk CLI
command: |
sudo ln -s $(realpath << parameters.test_snyk_command >>) /usr/local/bin/snyk
snyk --version
- run:
name: Running ShellSpec tests
working_directory: ./test/smoke
command: |
echo "Checkout the README in test/smoke folder for more details about this step"
shellspec -f d -e REGRESSION_TEST=1 -e PIP_BREAK_SYSTEM_PACKAGES=1

sign:
parameters:
go_os:
Expand Down
12 changes: 11 additions & 1 deletion .eslintrc.json
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,17 @@
"jest/no-conditional-expect": "warn",
"jest/no-try-expect": "warn",
"jest/no-identical-title": "warn",
"@typescript-eslint/ban-ts-comment": "warn"
"@typescript-eslint/ban-ts-comment": "warn",
"jest/no-standalone-expect": [
"error",
{
"additionalTestBlockFunctions": [
"testIf",
"describeIf",
"testIf.each"
]
}
]
}
}
]
Expand Down
23 changes: 0 additions & 23 deletions .github/workflows/iac-cli-alert.yml

This file was deleted.

56 changes: 0 additions & 56 deletions .github/workflows/iac-smoke-tests.yml

This file was deleted.

Loading