Skip to content

Latest commit

 

History

History
82 lines (47 loc) · 4.11 KB

snyk-security-scanning.md

File metadata and controls

82 lines (47 loc) · 4.11 KB
Raw
  1. Visit: https://snyk.io

01-snyk-home-page

  1. Click the "Signup with GitHub" button/link:

02-snyk-signup

  1. Click the button to "Athorise Snyk":

03-snyk-authorise

  1. Click to "Connect with GitHub":

04-snyk-integrations-select-github

  1. Again click "Connect with GitHub":

05-connect-to-github

  1. By default Snyk requests access to both public and private repos, Select whatever is relevant to you and continue:

06-snyk-wants-private-repos-by-default

  1. I selected only public repositories as I always follow the "principle of least privilege":

07-snyk-select-public-repos-only

  1. Confirm the access that Snyk is requesting:

08-snyk-authorise

  1. Connect to Snyk to a GitHub Repository:

09-snyk-connect-to-github-repo

  1. Select the desired repository: (in this case hapi-auth-jwt2 ...)

10-snyk-select-desired-repo

  1. Add selected repo:

11-snyk-add-1-selected-repository

  1. Wait for the repo to be imported by Snyk:

12-snyk-importing

  1. Once the repo has finished importing, refresh the page to see your dashboard:

13-snyk-finished-securing

  1. From the Snyk dashboard. Click on the project you want to view:

14-snyk-dashboard-projects

  1. Copy the Snyk "Badge" for inclusion in your project:

15-snyk-project-page

Badge Format:

[![Known Vulnerabilities](https://snyk.io/test/github/{username}/{repo}/badge.svg)](https://snyk.io/test/github/{username}/{repo})

Official Badge: Known Vulnerabilities

[![Known Vulnerabilities](https://snyk.io/test/github/dwyl/hapi-auth-jwt2/badge.svg?targetFile=package.json)](https://snyk.io/test/github/dwyl/hapi-auth-jwt2?targetFile=package.json)

Flat Square: Known Vulnerabilities

[![Known Vulnerabilities](https://snyk.io/test/github/dwyl/hapi-auth-jwt2/badge.svg?targetFile=package.json&style=flat-square)](https://snyk.io/test/github/dwyl/hapi-auth-jwt2?targetFile=package.json)

Note: just having a 3rd party service telling you there aren't any know vulnerabilities does not guarantee that your app is "secure"! You still need to write good code that escapes all input and follows "best practice"! But the snyk badge & service is a useful early warning system.