Integrate Snyk security scanning into GitHub repositories via CLI.
npx skills add https://github.com/zcaceres/skills --skill snyk
Please help me install this Agent Skill. Skill: snyk Source: https://github.com/zcaceres/skills/tree/main/plugins/security/skills/snyk Command: npx skills add https://github.com/zcaceres/skills --skill snyk
This skill streamlines the complex, multi-step process of integrating Snyk into a repository, ensuring security coverage without the common pitfalls of manual configuration or noisy, unsolicited fix PRs.
Invoke the security snyk command to begin the guided setup and verification process for your current repository.
High-intent search queries and answers about installing and using this skill.
To integrate Snyk, the skill verifies your GitHub App installation and configures project imports to activate scanning. It scaffolds the necessary CI workflows to ensure your repository is actively monitored for vulnerabilities.
To disable automatic fix PRs from Snyk, the integration automatically configures your project settings during setup. This reduces noise by preventing unsolicited dependency fix pull requests from cluttering your repository.
To add Snyk Code SAST tests, the integration scaffolds a pinned CI workflow directly into your repository. This fills the security coverage gap left by free-tier dependency-only scanning by running static application security testing.
Yes, you need GitHub CLI authentication and repository-level access to configure Snyk SAST workflows. These permissions are required to scaffold CI workflows and manage the necessary security secrets for scanning.
Free Snyk tiers often provide dependency-only scanning, leaving a gap in static analysis coverage. This integration addresses that limitation by optionally scaffolding a CI workflow to run Snyk Code SAST tests.
zcaceresConfigure Snyk security integration for GitHub repositories via GitHub CLI.
snykScan code and dependencies for vulnerabilities, apply fixes, and create pull requests.
MayaDispelerApply security checks across CI/CD pipelines with GitLeaks, Semgrep, Snyk, Trivy, and cosign.
thisisqubikaAnalyze code repositories for vulnerabilities using SAST and AI triage.
