I added my github projects to snyk.io portal to check vulnerabilities. Sadly, snyk is only checking files ending with the .json, .yml, .txt etc. It's not checking vulnerabilities in typescript, js, java, python files. I tried this couple times, same result, no change. Any suggestion?
Snyk doesn't check vulnerabilities in main code files
134 views Asked by Damika At
1
There are 1 answers
Related Questions in SECURITY
- HTTPS configuration in Spring Boot, server returning timeout
- HSM ZKA control mask values
- OWASP Amass Subcommands
- Is there a need for BPF Linux namespace?
- Error when trying to execute a binary compiled in a Kali Linux machine on an Ubuntu system
- When sanitize/encode while implementing tags system like on SO
- spring security version in spring-boot-starter-security
- I am currently trying to implement a rudimentary firewall from a video I watched but the nimda worm detection is not working and i do not know why?
- Is it possible for `sudo` to fail temporarily with the correct password? Hacking suspected
- Is it viable proxying all my mobile apps requests, to some kind knowing that a request is coming from a secure source
- What abilities should I concentrate on while bug hunting, and how can I improve the quality of my bug bounty reports?
- System.ArgumentOutOfRangeException: I passed this error in every single program
- How to prevent users from creating custom client apps?
- Does server-side content security policy exist for youtube video player API, app, mod apks and website?
- Can we pass a hostname/IP address as a query string in a GET request in REST API
Related Questions in CONFIGURATION
- Ubuntu wsl2 in windows, my /etc/fonts/fonts.conf keeps reloading
- I am trying to run java application in Eclipse, When I try to do Run > Run as > Java Application it starts to show little processing but nothing happe
- CISCO refuses to turn off spanning tree for specific vlans
- Resolve paths dynamically based on directory where test (or tested files) is located in Jest
- `android` Does Not Exist in `~/Android/Sdk/platform-tools`
- jboss configuration via ipv6 version jboss-eap-7.4
- I can't find a conenction diagarm for the OV7670 camera to the ESP8266
- Locally testing OS environmental variables in Ballerina
- Why is the build configuration always choosing production?
- App Configuration affecting VS Web Server Hosting
- IServiceCollectionConfigurator' does not contain a definition for 'UsingRabbitMq'
- Localhost Not Working After Creating Virtual Host in XAMPP
- Why am i unable to download MySql?
- Azure App Configuration - Replica for 429 HTTP responses
- TYPO3: tx-form custom fluid templates and class for submit button
Related Questions in SNYK
- Snyk doesn't check vulnerabilities in main code files
- How do I configure my .snyk file to fail the build automatically if the setting to ignore a particular vulnerability has passed its expiry?
- Snyk report medium severity for license
- `snyk-scm-contributor-count` failing to retrieve project list from github
- AntiForgeryToken suggested by SNYK tool
- Snyk reporting vulnerabilities in Apache-Beam 2.52.0
- org.yaml.snakeyaml.representer.Representer: method <init>()V not found in mvn java
- Jenkins Snyk plugin issue, artifacts are not found
- Audit of all user-initiated activity within a Snyk org/group
- NPM Installing dependency I do not want and it is a vulnerability, how can I remove it?
- npm - a package's 6th level dependency is shown to be using outdated version by snyk
- How to run multiple Snyk commands in a GitHub Actions workflow?
- How to address CWE-502 for Swift's Codable
- 'snyk-scm-contributors-count' is not recognized as an internal or external command, operable program or batch file
- Can snyk be configured to ignore all issues for a particular maven dependency?
Related Questions in DEVSECOPS
- DevOps Preference: Point Solutions or Single Platform?
- Notification for checkov scan
- Deploying React with Github actions
- Snyk doesn't check vulnerabilities in main code files
- How does Fortify calculates the "estimated remediation effort" score?
- Secret scanner with a feature to create tasks in Jira
- ERROR: Job failed: command terminated with exit code 1 (GitLab)
- How to stop password reset link being leaked to third party sites
- Webflow: host security.txt at .well-known
- error in trivy Vulnerability scanning: filesystem scan error & misconfiguration scan error
- how to find registry Domain ID if we have signing apks
- /docker-entrypoint.sh: line 13: exec: image: not found
- Fixed in Version not shown in harbor for trivy scan results of CVE
- Trufflehog not finding hard-coded password & secrets
- How to perform DAST on D365 ERP On Prem application using Veracode?
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Popular Tags
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)

I assume you're referring to SAST scan in your own code, not SCA / open source dependencies, right? Then it should be under "Code Analysis" (second item in your screenshot); that's where the SAST results appear. Everything else in above screenshot are results from SCA scans.
Can you open the "Code Analysis" and see what's in the report / which file types are shown there?