akanchhaS

## Inputs the script will need the SBOM format and the sbom file.Example : ./scan-sbom.sh <name_of_the_sbom_file> CycloneDX.


# Check if the correct number os parameters were provided
if [ $# -ne 2 ]; then
  echo "Usage: $0 SBOM_PATH SBOM_FORMAT"
  exit 1
fi

# First parameter is SBOM path

akanchhaS

Snyk Dependency Fix Report

Overview

This Python script generates a comprehensive report of direct dependencies that need to be updated in your project to address vulnerabilities. The report includes:

• Direct dependencies that require updates.
• The maximum version to which each dependency should be updated.
• A list of issues that will be fixed by updating, along with the affected packages.

akanchhaS

import requests

SNYK_TOKEN = "add snyk token here"

# API endpoint url
url = "https://api.snyk.io/rest/orgs?version=2023-08-29&limit=100"

headers = {
    'Accept': 'application/vnd.api+json',
    'Authorization': f'token {SNYK_TOKEN}' # <-- SNYK_TOKEN referenced here

akanchhaS

Setting up team city server and agent on your local machine with Snyk security plugin

TeamCity is one of the popular Build Automation tools and requires running of the Server and agent.

There are different ways of installing it which you can read more about here. This document specifically lists out the steps of running it locally.

Note: This doc covers basic steps to get the Teamcity and snyk security plugin set up and running.

Prerequisites

akanchhaS

Connecting Snyk UI with on-prem SCM and JIRA requires setting up a broker client.

When setting up a Snyk broker, the client access is only enabled for Open Source manifest files and dockerfile access. However, to hook up the repositories for Snyk Code and IAC, one would need to set up "code agent" as well.

Note: The broker client and code-agent MUST be present in the same network.

Steps to set-up the broker client and code agent.

In this example we will set up broker + code agent with Gitab.

Step 0 - Before getting started with the following sets up ensure that:

akanchhaS

{
  "public": [
    {
      "//": "used for pushing up webhooks from gitlab",
      "method": "POST",
      "path": "/webhook/gitlab/:webhookId"
    }
  ],
  "private": [
    {

akanchhaS

{
  "public": [
    {
      "//": "used for pushing up webhooks from github",
      "method": "POST",
      "path": "/webhook/github",
      "valid": [
        {
          "//": "accept all pull request state changes (these don't have files in them)",
          "path": "pull_request.state",