I added my github projects to snyk.io portal to check vulnerabilities. Sadly, snyk is only checking files ending with the .json, .yml, .txt etc. It's not checking vulnerabilities in typescript, js, java, python files. I tried this couple times, same result, no change. Any suggestion?
Snyk doesn't check vulnerabilities in main code files
134 views Asked by Damika At
1
There are 1 answers
Related Questions in SECURITY
- Can MVC.NET prevent SQL-injection at razor or controller level?
- Forgotten password reset page: should the user need to enter a username/email as well?
- Dynamic roles list in CustomAuthorize ASP MVC
- Access roles from multiple applications
- How to Fix TLS CBC Incorrect Padding Abuse Vulnerability on Windows 2003 Server
- Evernote Web Clipper and Content Security Policy
- Invalidate user credentials when password changes
- Spring Boot MVC non-role based security
- Correct Captcha behaviour on error
- Is macro more secure than static const if I don't want someone to know or change the hardcode value?
- In Android, ensuring only pre-decided users can only use the app
- Authenticating plain text passwords against md5 hash in DB using Apache Shiro
- Symfony2 - handle HTTP/Entity user access restrictions
- Client side computation without exposing code?
- searchable row level encryption using java?
Related Questions in CONFIGURATION
- Logback stopped logging after splitting shared config file
- Understanding Grizzly 1.9.36 internals
- Symfony 2 and php.yml configuration
- Tree configuration to turn on/off the features in java
- Deleting Repeated Services from Android GCM Config File
- What does the dot mean in Symfony service names?
- How to manage configuration data in large projects?
- org.apache.commons.configuration.INIConfiguration: section name with dot (period)
- How to include js files in a Visual Studio project on build
- What is the correct way to use app.config for my plugin when using MEF?
- How run several instances of GWT application in IntelliJIDEA
- ejabberd block messages from users that don't stay in my friend list
- CMake error while configuring "install TARGETS given no RUNTIME DESTINATION for executable target "assimp_simpletexturedogl"."
- Need help in configuring Jenkins with Coverity. Getting Error Message
- How do I access the service provider when registering using typescript class
Related Questions in SNYK
- Snyk doesn't check vulnerabilities in main code files
- How do I configure my .snyk file to fail the build automatically if the setting to ignore a particular vulnerability has passed its expiry?
- Snyk report medium severity for license
- `snyk-scm-contributor-count` failing to retrieve project list from github
- AntiForgeryToken suggested by SNYK tool
- Snyk reporting vulnerabilities in Apache-Beam 2.52.0
- org.yaml.snakeyaml.representer.Representer: method <init>()V not found in mvn java
- Jenkins Snyk plugin issue, artifacts are not found
- Audit of all user-initiated activity within a Snyk org/group
- NPM Installing dependency I do not want and it is a vulnerability, how can I remove it?
- npm - a package's 6th level dependency is shown to be using outdated version by snyk
- How to run multiple Snyk commands in a GitHub Actions workflow?
- How to address CWE-502 for Swift's Codable
- 'snyk-scm-contributors-count' is not recognized as an internal or external command, operable program or batch file
- Can snyk be configured to ignore all issues for a particular maven dependency?
Related Questions in DEVSECOPS
- DevOps Preference: Point Solutions or Single Platform?
- Notification for checkov scan
- Deploying React with Github actions
- Snyk doesn't check vulnerabilities in main code files
- How does Fortify calculates the "estimated remediation effort" score?
- Secret scanner with a feature to create tasks in Jira
- ERROR: Job failed: command terminated with exit code 1 (GitLab)
- How to stop password reset link being leaked to third party sites
- Webflow: host security.txt at .well-known
- error in trivy Vulnerability scanning: filesystem scan error & misconfiguration scan error
- how to find registry Domain ID if we have signing apks
- /docker-entrypoint.sh: line 13: exec: image: not found
- Fixed in Version not shown in harbor for trivy scan results of CVE
- Trufflehog not finding hard-coded password & secrets
- How to perform DAST on D365 ERP On Prem application using Veracode?
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)

I assume you're referring to SAST scan in your own code, not SCA / open source dependencies, right? Then it should be under "Code Analysis" (second item in your screenshot); that's where the SAST results appear. Everything else in above screenshot are results from SCA scans.
Can you open the "Code Analysis" and see what's in the report / which file types are shown there?