I added my github projects to snyk.io portal to check vulnerabilities. Sadly, snyk is only checking files ending with the .json, .yml, .txt etc. It's not checking vulnerabilities in typescript, js, java, python files. I tried this couple times, same result, no change. Any suggestion?
Snyk doesn't check vulnerabilities in main code files
134 Views Asked by Damika At
1
There are 1 best solutions below
Related Questions in SECURITY
- HTTPS configuration in Spring Boot, server returning timeout
- HSM ZKA control mask values
- OWASP Amass Subcommands
- Is there a need for BPF Linux namespace?
- Error when trying to execute a binary compiled in a Kali Linux machine on an Ubuntu system
- When sanitize/encode while implementing tags system like on SO
- spring security version in spring-boot-starter-security
- I am currently trying to implement a rudimentary firewall from a video I watched but the nimda worm detection is not working and i do not know why?
- Is it possible for `sudo` to fail temporarily with the correct password? Hacking suspected
- Is it viable proxying all my mobile apps requests, to some kind knowing that a request is coming from a secure source
- What abilities should I concentrate on while bug hunting, and how can I improve the quality of my bug bounty reports?
- System.ArgumentOutOfRangeException: I passed this error in every single program
- How to prevent users from creating custom client apps?
- Does server-side content security policy exist for youtube video player API, app, mod apks and website?
- Can we pass a hostname/IP address as a query string in a GET request in REST API
Related Questions in CONFIGURATION
- Ubuntu wsl2 in windows, my /etc/fonts/fonts.conf keeps reloading
- I am trying to run java application in Eclipse, When I try to do Run > Run as > Java Application it starts to show little processing but nothing happe
- CISCO refuses to turn off spanning tree for specific vlans
- Resolve paths dynamically based on directory where test (or tested files) is located in Jest
- `android` Does Not Exist in `~/Android/Sdk/platform-tools`
- jboss configuration via ipv6 version jboss-eap-7.4
- I can't find a conenction diagarm for the OV7670 camera to the ESP8266
- Locally testing OS environmental variables in Ballerina
- Why is the build configuration always choosing production?
- App Configuration affecting VS Web Server Hosting
- IServiceCollectionConfigurator' does not contain a definition for 'UsingRabbitMq'
- Localhost Not Working After Creating Virtual Host in XAMPP
- Why am i unable to download MySql?
- Azure App Configuration - Replica for 429 HTTP responses
- TYPO3: tx-form custom fluid templates and class for submit button
Related Questions in SNYK
- Snyk fails to ignore vulnerabilities when absolute file path is provided
- Audit of all user-initiated activity within a Snyk org/group
- Jenkins Snyk plugin issue, artifacts are not found
- org.yaml.snakeyaml.representer.Representer: method <init>()V not found in mvn java
- Snyk reporting vulnerabilities in Apache-Beam 2.52.0
- Install Snyk in Jenkins "Global Tool Configuration" using groovy
- How to do Snyk code test in Jenkins pipeline?
- Snyk for Talend package
- Snyk monitor command is failing
- Bash running cli command over and over when exit code is 1
- Snyk test returns Failed to test pip project error
- Snyk server can be installed in a machine without internet?
- How can I add a snyk badge to my private repository?
- Snyk CLI for docker scan azure pipeline
- Ignore all instances of certain software license
Related Questions in DEVSECOPS
- DevOps Preference: Point Solutions or Single Platform?
- Notification for checkov scan
- Deploying React with Github actions
- Snyk doesn't check vulnerabilities in main code files
- How does Fortify calculates the "estimated remediation effort" score?
- Secret scanner with a feature to create tasks in Jira
- ERROR: Job failed: command terminated with exit code 1 (GitLab)
- How to stop password reset link being leaked to third party sites
- Webflow: host security.txt at .well-known
- error in trivy Vulnerability scanning: filesystem scan error & misconfiguration scan error
- how to find registry Domain ID if we have signing apks
- /docker-entrypoint.sh: line 13: exec: image: not found
- Fixed in Version not shown in harbor for trivy scan results of CVE
- Trufflehog not finding hard-coded password & secrets
- How to perform DAST on D365 ERP On Prem application using Veracode?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?

I assume you're referring to SAST scan in your own code, not SCA / open source dependencies, right? Then it should be under "Code Analysis" (second item in your screenshot); that's where the SAST results appear. Everything else in above screenshot are results from SCA scans.
Can you open the "Code Analysis" and see what's in the report / which file types are shown there?