snyk 1.910.0 → 1.911.0

package/help/cli-commands/code.md

@@ -51,8 +51,6 @@ For more information see the article [How to select the organization to use in t
 
 Print results in JSON format.
 
-Example: `$ snyk code test --json-file-output=vuln.json`
-
 ### `--sarif`
 
 Return results in SARIF format.

package/help/cli-commands/iac-describe.md

@@ -34,26 +34,28 @@ For more information see [Configure cloud providers](https://docs.snyk.io/produc
 
 Use the `-d` option to output the debug logs.
 
-## Options
+## Required Arguments
 
-**Note:** To use the `describe` command, you **must use at least one of these options**:
-
-`--only-managed` or `--drift`\
-Scan only managed resources from the Terraform states.
+**Note:** To use the `describe` command, you **must use one of these options**:
 
 `--only-unmanaged`\
-Scan only unmanaged resources.
+Report resources not found in any Terraform states.
+
+`--only-managed` or `--drift`\
+Scan managed resources found in Terraform states for changes.
 
 `--all`\
 Scan both managed and unmanaged resources.
 
+## Optional Arguments
+
 See the list of options that follows for details.
 
 ### `--from=<STATE>[,<STATE>...]`
 
 Specify multiple states to be read.
 
-At this time, the `snyk iac describe` command supports reading Terraform states.
+The `snyk iac describe` command supports reading Terraform states.
 
 To read multiple states, pass `--from=` followed by a comma-separated list. You can also use glob patterns to match multiple state files at once.
 
@@ -77,7 +79,7 @@ Read and aggregate all Terraform states in a given directory:
 
 Use any unsupported backend by using `terraform` to pipe your state in a file and then use this file:
 
-`$ terraform state pull > state.tfstate`&#x20;
+`$ terraform state pull > state.tfstate`
 
 `$ snyk iac describe --all --from="tfstate://state.tfstate"`
 
@@ -114,20 +116,6 @@ This option cannot be used with a `.snyk` drift ignore rule; the content in `.sn
 
 The supported services are: `aws_s3`, `aws_ec2`, `aws_lambda`, `aws_rds`, `aws_route53`, `aws_iam` , `aws_vpc`, `aws_api_gateway`, `aws_apigatewayv2`, `aws_sqs`, `aws_sns`, `aws_ecr`, `aws_cloudfront`, `aws_kms`, `aws_dynamodb`, `azure_base`, `azure_compute`, `azure_storage`, `azure_network`, `azure_container`, `azure_database`, `azure_loadbalancer`, `azure_private_dns`, `google_cloud_platform`, `google_cloud_storage`, `google_compute_engine`, `google_cloud_dns`, `google_cloud_bigtable`, `google_cloud_bigquery`, `google_cloud_functions`, `google_cloud_sql`, `google_cloud_run`
 
-### `--all`
-
-Display a report that shows changes for both managed and unmanaged resources.
-
-### `--only-managed`
-
-Display a report that shows changes only for resources found in aggregated Terraform states; filter out drift for resources that are not managed by Terraform.&#x20;
-
-Alternative: `--drift`
-
-### `--only-unmanaged`
-
-Display a report that shows resources not found in any Terraform state; filter out drift for managed resources.
-
 ### `--quiet`
 
 Prevent stdout from being used for anything but the scan result.
@@ -150,7 +138,7 @@ Output the report as JSON to stdout.
 
 You can save the report to a file with a redirection:
 
-`$ snyk iac describe --json > report.json`&#x20;
+`$ snyk iac describe --json > report.json`
 
 ### `--html`
 
@@ -216,7 +204,7 @@ The `iac describe` command ignores service-linked resources by default (like ser
 
 Note: when using the strict mode with an AWS account, you may experience unnecessary noise from resources that do not belong to you.
 
-This can happen if you have an organization account in which you, by default, have a service-linked role associated to your the account, for example, **AWSServiceRoleForOrganizations**.&#x20;
+This can happen if you have an organization account in which you, by default, have a service-linked role associated to your the account, for example, **AWSServiceRoleForOrganizations**.
 
 Usage:
 
@@ -226,9 +214,7 @@ Usage:
 
 Enable deep mode for `--all`.
 
-Deep mode enables retrieval of details for resources, for deeper and more detailed drift detection. &#x20;
-
-**Note:** this option is experimental. Enabling deep mode can lead to unexpected behavior: false positive drifts or undetected drifts.
+Deep mode enables retrieval of details for resources, for deeper and more detailed drift detection.
 
 Usage:
 

package/help/cli-commands/iac-update-exclude-policy.md

@@ -6,7 +6,7 @@
 
 ## Description
 
-The `snyk iac update-exclude-policy` generates exclude policy rules to be used by `snyk iac test`.
+The `snyk iac update-exclude-policy` generates exclude policy rules to be used by `snyk iac describe`.
 
 For a list of related commands see the [snyk iac](iac.md) help; `iac --help`
 

package/help/cli-commands/iac.md

@@ -10,10 +10,12 @@ The `snyk iac` subcommands find and report security issues in Infrastructure as
 
 For more information see [Snyk CLI for Infrastructure as Code](https://docs.snyk.io/products/snyk-infrastructure-as-code/snyk-cli-for-infrastructure-as-code)
 
-## Subcommands with their options
+## Subcommands and the help docs
 
-Help docs for all the `iac` commands are listed here:
+All the `iac` commands are listed here with the help docs.
 
-- [iac test](iac-test.md); `iac test --help`
-- [iac describe](iac-describe.md); `iac describe --help`
-- [iac update-exclude-policy](iac-update-exclude-policy.md); `iac update-exclude-policy --help`
+- [`iac test`](iac-test.md); `iac test --help`: tests for any known security issue.
+- [iac describe](iac-describe.md); `iac describe--help`: detects infrastructure drift and unmanaged cloud resources\
+  Example: `snyk iac describe --only-unmanaged` 
+- [iac update-exclude-policy](iac-update-exclude-policy.md); `iac update-exclude-policy --help`: auto-generates `.snyk` exclusions for cloud resources\
+  Example: `snyk iac describe --json --all | snyk iac update-exclude-policy`

package/help/cli-commands/monitor.md

@@ -40,7 +40,7 @@ Use with `--all-projects` or `--yarn-workspaces` to indicate how many subdirecto
 
 Default: 4 (the current working directory (0) and 4 subdirectories).
 
-Example: Limit search to the specified directory (or the current directory if no `<PATH>` is specified) plus two levels of subdirectories.\
+Example: Limit search to the specified directory (or the current directory if no `<PATH>` is specified), zero (0) plus three levels of subdirectories.\
 `--detection-depth=3`
 
 ### `--exclude=<GLOB>[,<GLOB>]...>`

package/help/cli-commands/test.md

@@ -41,7 +41,7 @@ Use with `--all-projects` or `--yarn-workspaces` to indicate how many subdirecto
 
 Default: 4 (the current working directory (0) and 4 subdirectories).
 
-Example: Limit search to the specified directory (or the current directory if no `<PATH>` is specified) plus three levels of subdirectories.\
+Example: Limit search to the specified directory (or the current directory if no `<PATH>` is specified), zero plus three levels of subdirectories.\
 `--detection-depth=3`
 
 ### `--exclude=<GLOB>[,<GLOB>]...>`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snyk",
-  "version": "1.910.0",
+  "version": "1.911.0",
   "description": "snyk library and cli utility",
   "files": [
     "help/cli-commands",