Snyk is a closed source tool to "continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more".
Evaluation process first steps would be:
- setup to link to our code
- document how to add new repos
Description
Description
Event Timeline
Comment Actions
One of the problem is the lack of integration with Phabricator.
For example, it allows to interact with GitHub and open a PR there when it founds an issue: https://github.com/nasqueron/daeghrefn-www/pull/1
The PR is closed, when the branch is restored, it's autodeleted.
The commit message doesn't respect imperative mode: https://github.com/nasqueron/daeghrefn-www/pull/1/commits/28510e0cd38ce00cde64dfd1a736a7ff322cf0d4
Comment Actions
I've created the snyk user on phab and allowed commits to bypass review on phab first.