snyk 1.1237.0 → 1.1238.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/245.index.js +891 -688
- package/dist/cli/245.index.js.map +1 -1
- package/dist/cli/784.index.js +3 -2
- package/dist/cli/784.index.js.map +1 -1
- package/dist/cli/thirdPartyNotice.json +4 -4
- package/help/cli-commands/code-test.md +1 -1
- package/help/cli-commands/iac-describe.md +12 -40
- package/help/cli-commands/iac-update-exclude-policy.md +2 -6
- package/package.json +1 -1
- package/src/generated/sha256sums.txt +8 -8
- package/src/generated/version +1 -1
- package/wrapper_dist/generated/sha256sums.txt +8 -8
- package/wrapper_dist/generated/version +1 -1
|
@@ -744,10 +744,10 @@
|
|
|
744
744
|
},
|
|
745
745
|
{
|
|
746
746
|
"name": "dotnet-deps-parser",
|
|
747
|
-
"version": "5.5.
|
|
747
|
+
"version": "5.5.2",
|
|
748
748
|
"author": "snyk.io",
|
|
749
749
|
"repository": "https://github.com/snyk/dotnet-deps-parser",
|
|
750
|
-
"source": "https://registry.npmjs.org/dotnet-deps-parser/-/dotnet-deps-parser-5.5.
|
|
750
|
+
"source": "https://registry.npmjs.org/dotnet-deps-parser/-/dotnet-deps-parser-5.5.2.tgz",
|
|
751
751
|
"license": "Apache-2.0",
|
|
752
752
|
"licenseText": "Copyright 2018 Snyk Ltd.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n"
|
|
753
753
|
},
|
|
@@ -2542,10 +2542,10 @@
|
|
|
2542
2542
|
},
|
|
2543
2543
|
{
|
|
2544
2544
|
"name": "snyk-nuget-plugin",
|
|
2545
|
-
"version": "
|
|
2545
|
+
"version": "2.0.0",
|
|
2546
2546
|
"author": "snyk.io",
|
|
2547
2547
|
"repository": "https://github.com/snyk/snyk-nuget-plugin",
|
|
2548
|
-
"source": "https://registry.npmjs.org/snyk-nuget-plugin/-/snyk-nuget-plugin-
|
|
2548
|
+
"source": "https://registry.npmjs.org/snyk-nuget-plugin/-/snyk-nuget-plugin-2.0.0.tgz",
|
|
2549
2549
|
"license": "Apache-2.0",
|
|
2550
2550
|
"licenseText": "Copyright 2017 Snyk Ltd.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License."
|
|
2551
2551
|
},
|
|
@@ -10,7 +10,7 @@ The `snyk code test` command tests for any known security issues using Static Co
|
|
|
10
10
|
|
|
11
11
|
For more information see [Using Snyk Code via the CLI](../../scan-applications/snyk-code/using-snyk-code-from-the-cli/).
|
|
12
12
|
|
|
13
|
-
For instructions on ignoring issues with `snyk code test` see [Excluding directories and files from the Snyk Code CLI test](../../scan-
|
|
13
|
+
For instructions on ignoring issues with `snyk code test` see [Excluding directories and files from the Snyk Code CLI test](../../scan-application-code/snyk-code/cli-for-snyk-code/excluding-directories-and-files-from-the-snyk-code-cli-test.md).
|
|
14
14
|
|
|
15
15
|
## Exit codes
|
|
16
16
|
|
|
@@ -1,8 +1,5 @@
|
|
|
1
1
|
# IaC describe
|
|
2
2
|
|
|
3
|
-
**DEPRECATION NOTICE: Drift detection of managed resources**\
|
|
4
|
-
Drift detection of managed resources, including `snyk iac describe --only-managed and snyk iac describe --drift` has been deprecated. The end-of-life date for drift detection of managed resources is September 30. 2023.
|
|
5
|
-
|
|
6
3
|
## Usage
|
|
7
4
|
|
|
8
5
|
**Note:** This feature is available in Snyk CLI version v1.876.0 or greater.
|
|
@@ -11,10 +8,9 @@ Drift detection of managed resources, including `snyk iac describe --only-manage
|
|
|
11
8
|
|
|
12
9
|
## Description
|
|
13
10
|
|
|
14
|
-
The `snyk iac describe` command detects infrastructure
|
|
11
|
+
The `snyk iac describe` command detects unmanaged infrastructure resources. It compares resources in your Terraform state file against actual resources in your cloud provider and outputs a report.
|
|
15
12
|
|
|
16
13
|
- Resources in your Terraform state files are **managed resources**.
|
|
17
|
-
- Changes to managed resources not reflected in the Terraform state file are **drifts**.
|
|
18
14
|
- Resources that exist but are not in your Terraform state file are **unmanaged resources**.
|
|
19
15
|
|
|
20
16
|
For detailed information and examples, see [IaC describe command examples](https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources/iac-describe-command-examples)
|
|
@@ -26,7 +22,7 @@ For a list of related commands see the snyk [iac help](iac.md); `iac --help`
|
|
|
26
22
|
Possible exit codes and their meaning:
|
|
27
23
|
|
|
28
24
|
**0**: success, no drift found\
|
|
29
|
-
**1**:
|
|
25
|
+
**1**: unmanaged resources found\
|
|
30
26
|
**2**: failure
|
|
31
27
|
|
|
32
28
|
## Configure the Snyk CLI
|
|
@@ -41,22 +37,6 @@ You can set environment variables to configure the Terraform provider used by th
|
|
|
41
37
|
|
|
42
38
|
Use the `-d` option to output the debug logs.
|
|
43
39
|
|
|
44
|
-
## Required options
|
|
45
|
-
|
|
46
|
-
**Note:** To use the `describe` command, you **must use one of these options**:
|
|
47
|
-
|
|
48
|
-
### `--only-unmanaged`
|
|
49
|
-
|
|
50
|
-
Report resources not found in any Terraform states.
|
|
51
|
-
|
|
52
|
-
### `--only-managed` or `--drift`
|
|
53
|
-
|
|
54
|
-
Scan managed resources found in Terraform states for changes.
|
|
55
|
-
|
|
56
|
-
### `--all`
|
|
57
|
-
|
|
58
|
-
Scan both managed and unmanaged resources.
|
|
59
|
-
|
|
60
40
|
## Optional arguments
|
|
61
41
|
|
|
62
42
|
### `--org=<ORG_ID>`
|
|
@@ -65,13 +45,13 @@ Specify the `<ORG_ID>` to run Snyk commands tied to a specific organization. Ove
|
|
|
65
45
|
|
|
66
46
|
Note that you can also use `--org=<orgslugname>`. The `ORG_ID` works in both the CLI and the API. The organization slug name works in the CLI, but not in the API.
|
|
67
47
|
|
|
68
|
-
For more information see the article [How to select the organization to use in the CLI](https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/how-to-select-the-organization-to-use-in-the-cli)
|
|
48
|
+
For more information, see the article [How to select the organization to use in the CLI](https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/how-to-select-the-organization-to-use-in-the-cli)
|
|
69
49
|
|
|
70
50
|
### `--from=<STATE>[,<STATE>...]`
|
|
71
51
|
|
|
72
52
|
Specify multiple Terraform state files to be read. Glob patterns are supported.
|
|
73
53
|
|
|
74
|
-
For more information including **a list of supported IaC sources** and how to use them, see [IAC Sources usage](https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources/iac-sources-usage)
|
|
54
|
+
For more information, including **a list of supported IaC sources** and how to use them, see [IAC Sources usage](https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources/iac-sources-usage)
|
|
75
55
|
|
|
76
56
|
### `--to=<PROVIDER+TYPE>`
|
|
77
57
|
|
|
@@ -135,21 +115,13 @@ Filter rules allow you to build a JMESPath expression to include or exclude a se
|
|
|
135
115
|
|
|
136
116
|
To filter on resource attributes, deep mode must be enabled. Deep mode is enabled by default for `--all` and `--only-managed`. To enable deep mode while using `--only-unmanaged`, use the `--deep` option.
|
|
137
117
|
|
|
138
|
-
For more information see [Filter results](https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources/filter-results)
|
|
139
|
-
|
|
140
|
-
### `--deep`
|
|
141
|
-
|
|
142
|
-
Enable deep mode. Deep mode enables you to use the `--filter` option to include or exclude resources in the report based on their attributes.
|
|
143
|
-
|
|
144
|
-
Deep mode is enabled by default for `--all` and `--only-managed`. Use `--deep` if you want to filter on attributes while using `--only-unmanaged`.
|
|
145
|
-
|
|
146
|
-
For more information see [Filter results](https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources/filter-results)
|
|
118
|
+
For more information, see [Filter results](https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources/filter-results)
|
|
147
119
|
|
|
148
120
|
### `--strict`
|
|
149
121
|
|
|
150
122
|
Enable strict mode.
|
|
151
123
|
|
|
152
|
-
The `iac describe` command ignores service-linked resources by default (like service-linked AWS IAM roles, their policies and policy attachments). To include those resources in the report you can enable **strict mode**. Note that this can create noise when used with an AWS account.
|
|
124
|
+
The `iac describe` command ignores service-linked resources by default (like service-linked AWS IAM roles, their policies, and policy attachments). To include those resources in the report you can enable **strict mode**. Note that this can create noise when used with an AWS account.
|
|
153
125
|
|
|
154
126
|
## Options for policies
|
|
155
127
|
|
|
@@ -183,22 +155,22 @@ Output the report as html into a file.
|
|
|
183
155
|
|
|
184
156
|
For more examples, see [IaC describe command examples](https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources/iac-describe-command-examples)
|
|
185
157
|
|
|
186
|
-
### Detect
|
|
158
|
+
### Detect unmanaged resources on AWS with a single local Terraform state
|
|
187
159
|
|
|
188
160
|
```
|
|
189
|
-
$ snyk iac describe --
|
|
161
|
+
$ snyk iac describe --from="tfstate://terraform.tfstate"
|
|
190
162
|
```
|
|
191
163
|
|
|
192
164
|
### Specify AWS credentials
|
|
193
165
|
|
|
194
166
|
```
|
|
195
|
-
$ AWS_ACCESS_KEY_ID=XXX AWS_SECRET_ACCESS_KEY=XXX snyk iac describe
|
|
167
|
+
$ AWS_ACCESS_KEY_ID=XXX AWS_SECRET_ACCESS_KEY=XXX snyk iac describe
|
|
196
168
|
```
|
|
197
169
|
|
|
198
170
|
### Use an AWS named profile
|
|
199
171
|
|
|
200
172
|
```
|
|
201
|
-
$ AWS_PROFILE=profile_name snyk iac describe
|
|
173
|
+
$ AWS_PROFILE=profile_name snyk iac describe
|
|
202
174
|
```
|
|
203
175
|
|
|
204
176
|
### Use a single Terraform state stored on an S3 backend
|
|
@@ -210,11 +182,11 @@ $ snyk iac describe --from="tfstate+s3://my-bucket/path/to/state.tfstate"
|
|
|
210
182
|
### Aggregate multiple Terraform states
|
|
211
183
|
|
|
212
184
|
```
|
|
213
|
-
$ snyk iac describe --
|
|
185
|
+
$ snyk iac describe --from="tfstate://terraform_S3.tfstate,tfstate://terraform_VPC.tfstate"
|
|
214
186
|
```
|
|
215
187
|
|
|
216
188
|
### Aggregate many Terraform states, using glob pattern
|
|
217
189
|
|
|
218
190
|
```
|
|
219
|
-
$ snyk iac describe --
|
|
191
|
+
$ snyk iac describe --from="tfstate://path/to/**/*.tfstate"
|
|
220
192
|
```
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
#
|
|
1
|
+
# IaC update-exclude-policy
|
|
2
2
|
|
|
3
3
|
## Usage
|
|
4
4
|
|
|
@@ -29,10 +29,6 @@ Use the `-d` option to output the debug logs.
|
|
|
29
29
|
|
|
30
30
|
## Options
|
|
31
31
|
|
|
32
|
-
### `--exclude-changed`
|
|
33
|
-
|
|
34
|
-
Exclude resources that changed on cloud provider.
|
|
35
|
-
|
|
36
32
|
### `--exclude-missing`
|
|
37
33
|
|
|
38
34
|
Exclude missing resources.
|
|
@@ -44,5 +40,5 @@ Exclude resources not managed by IaC.
|
|
|
44
40
|
## Example
|
|
45
41
|
|
|
46
42
|
```
|
|
47
|
-
$ snyk iac describe --json
|
|
43
|
+
$ snyk iac describe --json | snyk iac update-exclude-policy
|
|
48
44
|
```
|
package/package.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
1
|
+
18f2f49a5f73278780895d214aa69514556196977deb3ca249cc49812218ed3a snyk-alpine
|
|
2
|
+
7db24a0aea135e4a2d0c53b57d1c572a9b527cdf8db5ca5c2b950d1fb708b24e snyk-fix.tgz
|
|
3
|
+
a242a865503a9621b25af458bb4d9a97a620d14438959d5921f5380780a5e204 snyk-linux-arm64
|
|
4
|
+
88d6c5288929d3270443e36091dff57aac9f15dac80ccf12145223adedf9d1fa snyk-linux
|
|
5
|
+
2ec37811a62d2c79451b43abcbf5e3ae22102660b1214896acb995eec5fa6c9d snyk-macos-arm64
|
|
6
|
+
af248c94e63138b70a7e6cb3fdc73d3961b857ddafdef19c64e662f77b449d36 snyk-macos
|
|
7
|
+
33946220047a6278bb8a20bf325ed848ee7c7c4e5272d4566bc704ded47ebf6b snyk-protect.tgz
|
|
8
|
+
a3774b4f18a334fe3423d3d55e324c64d7fa48a1b53a075d00b415de91e45d52 snyk-win.exe
|
package/src/generated/version
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.1238.0
|
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
1
|
+
18f2f49a5f73278780895d214aa69514556196977deb3ca249cc49812218ed3a snyk-alpine
|
|
2
|
+
7db24a0aea135e4a2d0c53b57d1c572a9b527cdf8db5ca5c2b950d1fb708b24e snyk-fix.tgz
|
|
3
|
+
a242a865503a9621b25af458bb4d9a97a620d14438959d5921f5380780a5e204 snyk-linux-arm64
|
|
4
|
+
88d6c5288929d3270443e36091dff57aac9f15dac80ccf12145223adedf9d1fa snyk-linux
|
|
5
|
+
2ec37811a62d2c79451b43abcbf5e3ae22102660b1214896acb995eec5fa6c9d snyk-macos-arm64
|
|
6
|
+
af248c94e63138b70a7e6cb3fdc73d3961b857ddafdef19c64e662f77b449d36 snyk-macos
|
|
7
|
+
33946220047a6278bb8a20bf325ed848ee7c7c4e5272d4566bc704ded47ebf6b snyk-protect.tgz
|
|
8
|
+
a3774b4f18a334fe3423d3d55e324c64d7fa48a1b53a075d00b415de91e45d52 snyk-win.exe
|
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.1238.0
|