snyk 1.1135.0 → 1.1136.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -44,7 +44,7 @@ Commands to find and manage security issues in Infrastructure as Code files.
44
44
 
45
45
  Find security issues using static code analysis.
46
46
 
47
- ### [`snyk sbom`](sbom.md) <a href="#snyk-sbom" id="snyk-sbom"></a>
47
+ ### [`snyk sbom`](sbom.md)
48
48
 
49
49
  Produce an SBOM for a local software project in an ecosystem supported by Snyk.
50
50
 
@@ -45,7 +45,7 @@ Default: `<ORG_ID>` that is the current preferred organization in your [Account
45
45
 
46
46
  Note that you can also use `--org=<orgslugname>`. The `ORG_ID` works in both the CLI and the API. The organization slug name works in the CLI, but not in the API.
47
47
 
48
- For more information see the article [How to select the organization to use in the CLI](https://support.snyk.io/hc/en-us/articles/360000920738-How-to-select-the-organization-to-use-in-the-CLI)
48
+ For more information see the article [How to select the organization to use in the CLI](https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/how-to-select-the-organization-to-use-in-the-cli)
49
49
 
50
50
  ### `--json`
51
51
 
@@ -0,0 +1,84 @@
1
+ # IaC capture
2
+
3
+ ## Usage
4
+
5
+ **Feature availability:** This feature is available in Snyk CLI version v1.1117.0 or greater.
6
+
7
+ `snyk iac capture [<OPTIONS>] [<PATH>]`
8
+
9
+ ## Description
10
+
11
+ The `snyk iac capture` command generates a mapping artifact that contains the minimum amount of information needed to generate, from Terraform state files, resource mappings from code to Cloud, such as resource IDs and names, and sends the mapping artifact to Snyk.
12
+
13
+ Snyk uses this information to link Cloud issues to their originating IaC files. The links can be viewed in the Snyk Web UI.
14
+
15
+ For more information, see [Fix Cloud issues in IaC](https://docs.snyk.io/scan-cloud-deployment/snyk-cloud/snyk-cloud-issues/fix-cloud-issues-in-iac)
16
+
17
+ For a list of related commands see the [snyk iac](iac.md) help; `iac --help`
18
+
19
+ ## Exit codes
20
+
21
+ Possible exit codes and their meaning:
22
+
23
+ **0**: success\
24
+ **1**: failed to capture one or more Terraform states
25
+
26
+ ## Configure the Snyk CLI
27
+
28
+ You can use environment variables and set variables for connecting with the Snyk API; see [Configure the Snyk CLI](https://docs.snyk.io/snyk-cli/configure-the-snyk-cli)
29
+
30
+ ## Debug
31
+
32
+ Use the `-d` option to output the debug logs.
33
+
34
+ ## Options
35
+
36
+ ### `--org=<ORG_ID>`
37
+
38
+ Specify the `<ORG_ID>` to run Snyk commands tied to a specific organization. Overrides the default `<ORG_ID>` that is the current preferred organization in your [Account settings](https://app.snyk.io/account)
39
+
40
+ Note that you can also use `--org=<orgslugname>`. The `ORG_ID` works in both the CLI and the API. The organization slug name works in the CLI, but not in the API.
41
+
42
+ For more information see the article [How to select the organization to use in the CLI](https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/how-to-select-the-organization-to-use-in-the-cli)
43
+
44
+ ### `--stdin`
45
+
46
+ Generate the mapping artifact from Terraform state in the standard input instead of looking for state files in the `PATH`.
47
+
48
+ ```
49
+ $ terraform pull | snyk iac capture --stdin
50
+ ```
51
+
52
+ ### `PATH`
53
+
54
+ Optional argument to generate the mapping artifact from Terraform state file(s) in the PATH. Can either be a path to a directory, a path to a file, or a glob pattern.
55
+
56
+ ```
57
+ $ snyk iac capture /path/to/states/**/*.tfstate
58
+ ```
59
+
60
+ ## Examples for snyk iac capture command
61
+
62
+ ### Capture from all states in the current working directory
63
+
64
+ ```
65
+ $ snyk iac capture
66
+ ```
67
+
68
+ ### Capture from all files ending with .tfstate in a directory
69
+
70
+ ```
71
+ $ snyk iac capture /path/to/states/**/*.tfstate
72
+ ```
73
+
74
+ ### Capture from a single state file
75
+
76
+ ```
77
+ $ snyk iac capture /path/to/state.tfstate
78
+ ```
79
+
80
+ ### Capture from states pulled with Terraform in the standard input
81
+
82
+ ```
83
+ $ terraform pull | snyk iac capture --stdin
84
+ ```
@@ -62,7 +62,7 @@ Specify the `<ORG_ID>` to run Snyk commands tied to a specific organization. Ove
62
62
 
63
63
  Note that you can also use `--org=<orgslugname>`. The `ORG_ID` works in both the CLI and the API. The organization slug name works in the CLI, but not in the API.
64
64
 
65
- For more information see the article [How to select the organization to use in the CLI](https://support.snyk.io/hc/en-us/articles/360000920738-How-to-select-the-organization-to-use-in-the-CLI)
65
+ For more information see the article [How to select the organization to use in the CLI](https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/how-to-select-the-organization-to-use-in-the-cli)
66
66
 
67
67
  ### `--from=<STATE>[,<STATE>...]`
68
68
 
@@ -15,7 +15,8 @@ For more information see [Snyk CLI for Infrastructure as Code](https://docs.snyk
15
15
  All the `snyk iac` commands are listed here with the help options:
16
16
 
17
17
  - [iac test](iac-test.md); `iac test --help`: tests for any known security issue
18
- - [iac update-exclude-policy](iac-update-exclude-policy.md); `iac update-exclude-policy --help`: auto-generates `.snyk` exclusions for cloud resources\
19
- Example: `snyk iac describe --json --all | snyk iac update-exclude-policy`
18
+ - [iac capture](iac-capture.md); `iac capture --help`: generates mapping artifacts by accessing Terraform state configurations&#x20;
20
19
  - [iac describe](iac-describe.md); `iac describe --help`: detects infrastructure drift and unmanaged cloud resources\
21
20
  Example: `snyk iac describe --only-unmanaged`
21
+ - [iac update-exclude-policy](iac-update-exclude-policy.md); `iac update-exclude-policy --help`: auto-generates `.snyk` exclusions for cloud resources\
22
+ Example: `snyk iac describe --json --all | snyk iac update-exclude-policy`
@@ -110,7 +110,7 @@ Default: `<ORG_ID>` that is the current preferred organization in your [Account
110
110
 
111
111
  Note that you can also use `--org=<orgslugname>`. The `ORG_ID` works in both the CLI and the API. The organization slug name works in the CLI, but not in the API.
112
112
 
113
- For more information see the article [How to select the organization to use in the CLI](https://support.snyk.io/hc/en-us/articles/360000920738-How-to-select-the-organization-to-use-in-the-CLI)
113
+ For more information see the article [How to select the organization to use in the CLI](https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/how-to-select-the-organization-to-use-in-the-cli)
114
114
 
115
115
  ### `--file=<FILE>`
116
116
 
@@ -310,7 +310,7 @@ You can specify how many sub-directories to search using `--detection-depth`.
310
310
 
311
311
  You can exclude directories and files using `--exclude`.
312
312
 
313
- Default:`--all-projects` automatically detects and scans Yarn Workspaces.with other projects.&#x20;
313
+ Default:`--all-projects` automatically detects and scans Yarn Workspaces.with other projects.
314
314
 
315
315
  ## Option for CocoaPods projects
316
316
 
@@ -352,7 +352,7 @@ Add`--package-manager=pip` to your command if the file name is not `requirements
352
352
 
353
353
  This option is mandatory if you specify a value for the `--file` parameter that is not to a `requirements.txt` file. The test fails without this parameter. Specify this parameter with the value `pip`.
354
354
 
355
- For complete information about the command see [`--package-manager=<PACKAGE_MANAGER_NAME>`](https://docs.snyk.io/snyk-cli/commands/monitor#package-manager-less-than-package_manager_name-greater-than)``
355
+ For complete information about the command see [`--package-manager=<PACKAGE_MANAGER_NAME>`](https://docs.snyk.io/snyk-cli/commands/monitor#package-manager-less-than-package_manager_name-greater-than)\`\`
356
356
 
357
357
  ## Options for scanning using `--unmanaged`
358
358
 
@@ -6,7 +6,7 @@
6
6
 
7
7
  **Note:** In order to run the SBOM generation feature, you must use a minimum of CLI version 1.1071.0.
8
8
 
9
- `$ snyk sbom --format=<cyclonedx1.4+json|spdx2.3+json|cyclonedx1.4+xml> [--file=<file>] [--unmanaged] [--org=<ORG_ID>] [<TARGET_DIRECTORY>]`
9
+ `$ snyk sbom --format=<cyclonedx1.4+json|cyclonedx1.4+xml>|spdx2.3+json [--file=<file>] [--unmanaged] [--org=<ORG_ID>] [<TARGET_DIRECTORY>]`
10
10
 
11
11
  ## Description
12
12
 
@@ -107,7 +107,7 @@ Default: `<ORG_ID>` that is the current preferred organization in your [Account
107
107
 
108
108
  **Note:** You can also use `--org=<orgslugname>.` The `ORG_ID` works in both the CLI and the API. The organization slug name works in the CLI, but not in the API.
109
109
 
110
- For more information see the article [How to select the organization to use in the CLI](https://support.snyk.io/hc/en-us/articles/360000920738-How-to-select-the-organization-to-use-in-the-CLI)
110
+ For more information see the article [How to select the organization to use in the CLI](https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/how-to-select-the-organization-to-use-in-the-cli)
111
111
 
112
112
  ### `--file=<FILE>`
113
113
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "snyk",
3
- "version": "1.1135.0",
3
+ "version": "1.1136.0",
4
4
  "description": "snyk library and cli utility",
5
5
  "files": [
6
6
  "*"
@@ -1,10 +1,10 @@
1
- e9ff7e654db835218db3738a1a9407edfc131b7d0dd43e24bcbb525806cd179f docker-mac-signed-bundle.tar.gz
2
- cd933b1f0e81e3f5923b58a5493a8728311fa8a898ef0677a309bee0a4ef5976 snyk-alpine
3
- c70d40e2fa82a3aca18f40fa486343ea873bc2bde5878f4e1a7c9565f04d8a34 snyk-fix.tgz
4
- d7f02bb09e628dc2664cac909b91da1b0eacf747cb7e6d9bf037a99061c4c0d0 snyk-for-docker-desktop-darwin-arm64.tar.gz
5
- 09b3b2ad13d6e5e048be748d425cc2c7011ad1c1df6d4e5d11d8b700b29a8860 snyk-for-docker-desktop-darwin-x64.tar.gz
6
- d379a3d056b1e14b61a7764490931c5f35abb19b4c1ba5d060d0734765152f09 snyk-linux-arm64
7
- 492d2d969f856babf9aec3f291650c8b39d0cc113206f2ec61e16c152b01df01 snyk-linux
8
- 3da71318154ee1a78764d2cadd33844a6ca60ab30399a322a53eeb5ac1f1d4d9 snyk-macos
9
- ac88102c8789dfeae1643b949e2fb1bfcc5de3dc67138acc9603de9f33725ef4 snyk-protect.tgz
10
- f77a7567adb7926b9393854a54be1ab9ef54e33534f1b09e135b8ebee46b0baa snyk-win.exe
1
+ a10666d0a722654497449697ff576a0988963731983cbf37e755de1f77c5b3ec docker-mac-signed-bundle.tar.gz
2
+ 73c136e5b74b36fc112a7a648aa9eb87929cda8b8f14895545747efa12469093 snyk-alpine
3
+ 1e82b678f25b6a456f3a6bdb01dfd5be9e154778c071b5efb824ebd39d702650 snyk-fix.tgz
4
+ 756a986ad05a8cc3db487b98bb47f10019d170fd19fe0b7ff9296e6a94541531 snyk-for-docker-desktop-darwin-arm64.tar.gz
5
+ 95b121284c4a6a9a89ff81c20effaf5fb729ffa11a737e0f232ba3df4f0db730 snyk-for-docker-desktop-darwin-x64.tar.gz
6
+ 7ccffae0d36bee2073e2b0bcab7ce592d92bfe27908d1d295e965a560819a288 snyk-linux-arm64
7
+ 5c30fa0c2a5d5029a7356b342f5a1c485bc50a82107c5ba2f30eb5ac8f6633ed snyk-linux
8
+ ce934bb1c31758842fdce9b9f48d3a2377efa125c2650c87637082d619dd1400 snyk-macos
9
+ 4239bd6d287b5691e14e963f9ed77ac5f703021626e5efba420bf06127caf3ab snyk-protect.tgz
10
+ 8cb9ac558f0bf0e6d1147fde3d86a728d08a555d63ca4a8552225c00a4d5f198 snyk-win.exe
@@ -1 +1 @@
1
- 1.1135.0
1
+ 1.1136.0
@@ -1,10 +1,10 @@
1
- e9ff7e654db835218db3738a1a9407edfc131b7d0dd43e24bcbb525806cd179f docker-mac-signed-bundle.tar.gz
2
- cd933b1f0e81e3f5923b58a5493a8728311fa8a898ef0677a309bee0a4ef5976 snyk-alpine
3
- c70d40e2fa82a3aca18f40fa486343ea873bc2bde5878f4e1a7c9565f04d8a34 snyk-fix.tgz
4
- d7f02bb09e628dc2664cac909b91da1b0eacf747cb7e6d9bf037a99061c4c0d0 snyk-for-docker-desktop-darwin-arm64.tar.gz
5
- 09b3b2ad13d6e5e048be748d425cc2c7011ad1c1df6d4e5d11d8b700b29a8860 snyk-for-docker-desktop-darwin-x64.tar.gz
6
- d379a3d056b1e14b61a7764490931c5f35abb19b4c1ba5d060d0734765152f09 snyk-linux-arm64
7
- 492d2d969f856babf9aec3f291650c8b39d0cc113206f2ec61e16c152b01df01 snyk-linux
8
- 3da71318154ee1a78764d2cadd33844a6ca60ab30399a322a53eeb5ac1f1d4d9 snyk-macos
9
- ac88102c8789dfeae1643b949e2fb1bfcc5de3dc67138acc9603de9f33725ef4 snyk-protect.tgz
10
- f77a7567adb7926b9393854a54be1ab9ef54e33534f1b09e135b8ebee46b0baa snyk-win.exe
1
+ a10666d0a722654497449697ff576a0988963731983cbf37e755de1f77c5b3ec docker-mac-signed-bundle.tar.gz
2
+ 73c136e5b74b36fc112a7a648aa9eb87929cda8b8f14895545747efa12469093 snyk-alpine
3
+ 1e82b678f25b6a456f3a6bdb01dfd5be9e154778c071b5efb824ebd39d702650 snyk-fix.tgz
4
+ 756a986ad05a8cc3db487b98bb47f10019d170fd19fe0b7ff9296e6a94541531 snyk-for-docker-desktop-darwin-arm64.tar.gz
5
+ 95b121284c4a6a9a89ff81c20effaf5fb729ffa11a737e0f232ba3df4f0db730 snyk-for-docker-desktop-darwin-x64.tar.gz
6
+ 7ccffae0d36bee2073e2b0bcab7ce592d92bfe27908d1d295e965a560819a288 snyk-linux-arm64
7
+ 5c30fa0c2a5d5029a7356b342f5a1c485bc50a82107c5ba2f30eb5ac8f6633ed snyk-linux
8
+ ce934bb1c31758842fdce9b9f48d3a2377efa125c2650c87637082d619dd1400 snyk-macos
9
+ 4239bd6d287b5691e14e963f9ed77ac5f703021626e5efba420bf06127caf3ab snyk-protect.tgz
10
+ 8cb9ac558f0bf0e6d1147fde3d86a728d08a555d63ca4a8552225c00a4d5f198 snyk-win.exe
@@ -1 +1 @@
1
- 1.1135.0
1
+ 1.1136.0