Finding vulnerabilities with Snyk in your Bitbucket workflow
iSpeech.org
Snyk’s integration with Bitbucket Server allows developers to protect their code from any open source vulnerabilities as part of their daily workflow. Snyk scans all opened pull requests to ensure they aren’t introducing new open source vulnerabilities, and can block such pull requests from being merged.
Snyk would also scan repositories daily to test for newly disclosed vulnerabilities. In case that a new vulnerability was found, not only will Snyk alert on the newly found vulnerability, but will also open a fix pull request with suggested upgrades or Snyk’s precision patches to fix the vulnerability.
2019-01-15 16:07:32
source
Gloss