Skip to content
This repository has been archived by the owner on Sep 19, 2021. It is now read-only.

Update project to use Snyk #121

Closed
ryanhofdotgov opened this issue May 16, 2018 · 4 comments
Closed

Update project to use Snyk #121

ryanhofdotgov opened this issue May 16, 2018 · 4 comments

Comments

@ryanhofdotgov
Copy link
Contributor

ryanhofdotgov commented May 16, 2018 •
edited by afeld
Loading

Gemnasium.com is shutting down, 18F handbook recommends Snyk for Go and Javascript:
https://before-you-ship.18f.gov/security/static-analysis/

Also see example in Forest Service project:
USDAForestService/fs-open-forest-platform#166
@afeld afeld changed the title Update project to use synk Update project to use Snyk Jul 2, 2018
@line47 line47 self-assigned this Jul 10, 2018
@line47
Copy link
Contributor

line47 commented Jul 11, 2018

Added Snyk to the GitHub Repo and granted access to @ryanhofdotgov and @afeld
We should see Snyk run on the next PR submitted

@afeld
Copy link
Contributor

afeld commented Jul 11, 2018

@afeld afeld mentioned this issue Jul 13, 2018
Merged
@afeld
Copy link
Contributor

afeld commented Jul 16, 2018

Couldn't get Snyk to recognize the Gopkg.lock file under api/, so you might try reaching out to support, or moving it up to the top level of the repository.

@line47 line47 assigned afeld and unassigned line47 Jul 17, 2018
@afeld afeld removed their assignment Jul 18, 2018
@afeld afeld mentioned this issue Jul 18, 2018
Closed
@afeld
Copy link
Contributor

afeld commented Jul 18, 2018

Moving Golang work to it's own issue: #584

@afeld afeld closed this as completed Jul 18, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@afeld @line47 @ryanhofdotgov