4

Snyk Infrastructure as Code

 3 years ago
source link: https://snyk.io/blog/view-and-report-snyk-infrastructure-as-code-iac-configuration-issues/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

View and report on all of your Snyk Infrastructure as Code configuration issues

Ben Laplanche

April 6, 2021

We’re pleased to announce support for viewing all of your Snyk Infrastructure as Code (Snyk IaC) configuration issues in the reporting functionality of the Snyk platform.

You can now view a complete picture of the open issues across your application, covering vulnerabilities from open source libraries and container images, licenses, and now configuration issues from your Kubernetes and Terraform files. Snyk’s reports provide you a high level view of the number of issues you have open now, as well as a longer term trending view that allows you to see how quickly issues are being resolved. With the addition of the configuration issues that are discovered by Snyk IaC, you can now see different components of your application reported in the same view, giving you a broader picture of your application’s security.

Snyk reporting

The reporting dashboard provides a high level summary view, showing trends over time and how long issues have been open. This enables you to easily get a snapshot view of where you are today and work with teams to help them progress. 

You can also drill down to view issues specifically related to configuration, allowing you to get a more detailed view of how secure your Kubernetes & Terraform deployments are. If you have used Snyk’s reports before, you’ll notice there is a new issue type called Configuration in the filters, to help quickly sort these issues from vulnerabilities and license compliance issues:

View your Snyk IaC issues by priority

You can view a full list of open issues, where you can see the severity of the issue and the project in which it was found. At the issues level, you can use the Issues Filter to further refine the view to Kubernetes, Helm, or Terraform issues, or all of the above:

Easily filter your Snyk IaC issues

Of course, one option that many customers prefer is to programmatically work with the data externally by integrating with our API (check out our API Wednesdaysseries if you want to dig deep on the Snyk API), or exporting the data to CSV from the Issues tab in reporting, both of which are available now with your Snyk IaC data.

The ability to view reports of your configuration issues is available today for all paid Snyk Infrastructure as Code customers. For more information, view the Snyk IaC documentation.

Preview in new tab

Start using Snyk IaC

Get started with the free tier of Snyk IaC today.


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK