rss

<rss xmlns:ns0="http://www.w3.org/2005/Atom" version="2.0">
	<channel>
		<title>Snyk Product Updates</title>
		<link>https://snyk.gitbook.io/product-updates/</link>
		<description>Snyk product updates.</description>
		<language>en-us</language>
		<pubDate>Thu, 02 May 2024 12:10:34 GMT</pubDate>
		<ns0:link href="https://raw.githubusercontent.com/snyk/product-updates-docs/main/rss" rel="self" type="application/rss+xml" />
		<item>
			<title>Snyk Code Improvements: Support for LLM Sources</title>
			<pubDate>Wed, 01 May 2024 12:10:34 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#snyk-code-improvements-support-for-llm-sources</link>
			<guid>https://snyk.gitbook.io/product-updates#snyk-code-improvements-support-for-llm-sources_May_1_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As adoption of LLM platforms like OpenAI and Gemini grows, so does the security risk associated with using them. We&#8217;ve added LLM sources to our ruleset which means the taint vulnerabilities supported by Snyk Code will now report when untrusted data from an LLM reaches a sensitive function. This greatly expands our coverage in the fast growing AI domain across all of our supported languages.&lt;/p&gt;
&lt;p&gt;We are committed to enabling our customers to securely leverage cutting edge AI tools and libraries. Our analysts will continue to research this topic in detail, and we will periodically publish this research in our blog. You can read the latest post on &lt;a href="https://snyk.io/blog/code-injection-vulnerabilities-caused-by-generative-ai/"&gt;code injection vulnerabilities in Python caused by Generative AI&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you have any questions, or want a detailed list of LLM libraries added, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AppRisk Pro now available</title>
			<pubDate>Wed, 01 May 2024 16:20:11 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#snyk-apprisk-pro-now-available</link>
			<guid>https://snyk.gitbook.io/product-updates#snyk-apprisk-pro-now-available_May_1_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're thrilled to announce that Snyk AppRisk Pro is now available. Snyk AppRisk Pro expands on Snyk AppRisk&#8217;s core capabilities of application discovery &amp;amp; visibility, security coverage management, and risk-based prioritization with the following new capabilities:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Application Analytics&lt;/strong&gt; - a new data analytics capability offering AppSec teams a comprehensive overview of their AppSec program at a macro level, facilitating tracking, measurement, and reporting on program performance and risk KPIs.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Extended security coverage visibility&lt;/strong&gt; - new integrations with Nightfall AI and GitGuardian extend visibility of Snyk AppRisk to secret detection tools for managing security coverage on your repositories.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Risk based prioritization with runtime intelligence&lt;/strong&gt; - integrations with leading security and observability solutions, as well as a new, eBPF-based Snyk runtime sensor, provide runtime context to enable security teams to prioritize what to fix first and to assess any gaps in Snyk Container coverage vs. running containers. These runtime data sources are in a closed beta.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;To learn more, please reference our product documentation and reach out to your account team with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Filter through your audit logs more efficiently with the new GA REST version of the audit logs API, and api.access is now opt-in</title>
			<pubDate>Tue, 30 Apr 2024 14:21:33 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#filter-through-your-audit-logs-more-efficiently-with-the-new-ga-rest-version-of-the-audit-logs-api,-and-api.access-is-now-opt-in</link>
			<guid>https://snyk.gitbook.io/product-updates#filter-through-your-audit-logs-more-efficiently-with-the-new-ga-rest-version-of-the-audit-logs-api,-and-api.access-is-now-opt-in_April_30_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We've made some great new improvements to our existing GA REST audit log API to help you filter and find the logs you need more efficiently:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;&lt;strong&gt;Filter over time&lt;/strong&gt; - Previously, users faced challenges filtering audit logs due to the smallest unit being within a day. This difficulty escalates for users who may need to sift through millions of logs to find specific events. Now, by expanding filtering options to larger time periods and reducing the minimum granularity to 1-second ranges, customers can broaden their search while pinpointing crucial audit events like security breaches or for external audits.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Exclude events&lt;/strong&gt; - some users can have millions of audit logs being produced every day so they need the ability to exclude certain events to reduce the noise of what they have to sieve through. We already have exclude events in the API today but you can only provide 1 include or exclude event, so we&#8217;ve improved this by providing multiple include and exclude events.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;For more information, check out the &lt;a href="https://apidocs.snyk.io/?version=2024-04-29#get-/groups/-group_id-/audit_logs/search"&gt;API documentation&lt;/a&gt;, and we hope you update your version and enjoy these new improvements soon!&lt;/p&gt;
&lt;p&gt;In addition, we are making &lt;code&gt;api.access&lt;/code&gt; endpoint to be opt-in for users rather than automatically returning results due to feedback that &lt;code&gt;api.access&lt;/code&gt; causes noise problems. We&#8217;re actively working towards a proper audit event for actions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Introducing Semantic Versioning, and Release Channels to Snyk CLI</title>
			<pubDate>Tue, 30 Apr 2024 14:21:33 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#introducing-semantic-versioning,-and-release-channels-to-snyk-cli</link>
			<guid>https://snyk.gitbook.io/product-updates#introducing-semantic-versioning,-and-release-channels-to-snyk-cli_April_30_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to introduce Semantic Versioning and Release Channels to Snyk CLI from &lt;a href="https://github.com/snyk/cli/releases/tag/v1.1291.0"&gt;v.1.1291.0&lt;/a&gt; onwards. These changes will allow all Snyk customers to select a sustainable release cadence that works for them, and help optimize governance and compliance overhead for enterprise customers.&lt;/p&gt;
&lt;p&gt;Snyk CLI v.1.1291.0 follows three part MAJOR.MINOR.PATCH notation going forward, details for which are available in &lt;a href="https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;We are introducing the following release channels:&lt;/p&gt;
&lt;p&gt;&lt;code&gt;preview&lt;/code&gt; &#8220;pre-release&#8221; builds are deployed regularly up to multiple times a day and contain the latest changes.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Version Pattern: v{MAJOR}.{MINOR}.{PATCH}-preview&lt;/li&gt;
&lt;li&gt;Cadence: Varying&lt;/li&gt;
&lt;li&gt;Availability:&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;code&gt;- https://static.snyk.io/cli/preview/
- https://static.snyk.io/fips/cli/preview/&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;&lt;code&gt;rc&lt;/code&gt; &#8220;release candidate&#8221; pre-releases are deployed at distinct points in time and contain a version of the CLI that is expected to be promoted to stable after additional testing&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Version Pattern: v{MAJOR}.{MINOR}.{PATCH}-rc&lt;/li&gt;
&lt;li&gt;Cadence: every 8 weeks, 2 weeks before a stable release &lt;em&gt;(hotfix releases possible)&lt;/em&gt;&lt;/li&gt;
&lt;li&gt;Availability:&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;code&gt;- https://static.snyk.io/cli/rc/
- https://static.snyk.io/fips/cli/rc/&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;&lt;code&gt;stable&lt;/code&gt; stable builds are deployed at distinct points in time after being additionally tested and considered stable.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Version Pattern: v{MAJOR}.{MINOR}.{PATCH}&lt;/li&gt;
&lt;li&gt;Cadence: every 8 weeks, end of an even month &lt;em&gt;(hotfix releases possible)&lt;/em&gt;&lt;/li&gt;
&lt;li&gt;Availability:&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;code&gt;- https://github.com/snyk/cli/releases/
- https://static.snyk.io/cli/stable/
- https://static.snyk.io/fips/cli/stable/
- npm
- brew
- scoop
- Snyk-images&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;Existing Snyk CLI, and supported IDEs users are opted into the stable channel by default. You can find more information on how to opt into a release channel of your choice in our &lt;a href="https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: New Sanitization Logic in Snyk Code</title>
			<pubDate>Fri, 26 Apr 2024 18:15:09 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#snyk-code-improvements-new-sanitization-logic-in-snyk-code</link>
			<guid>https://snyk.gitbook.io/product-updates#snyk-code-improvements-new-sanitization-logic-in-snyk-code_April_26_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce an update to Snyk Code's sanitization logic, enhancing the accuracy of our SAST testing across all supported languages. This upgrade introduces argument position awareness to our taint analysis, significantly reducing false positives in vulnerability detection.&lt;/p&gt;
&lt;p&gt;This update resolves inconsistencies previously seen, especially in interfile sanitization, where the behavior of functions defined and called across different files could lead to varying results. The new logic ensures consistent detection and reporting, improving the clarity and reliability of code security assessments.&lt;/p&gt;
&lt;p&gt;Should you need further information or support, please contact your account team.&lt;/p&gt;
&lt;p&gt;Thank you for using Snyk Code to enhance your application security.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: Support for Python FastAPI</title>
			<pubDate>Fri, 26 Apr 2024 18:15:09 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#snyk-code-improvements-support-for-python-fastapi</link>
			<guid>https://snyk.gitbook.io/product-updates#snyk-code-improvements-support-for-python-fastapi_April_26_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that Snyk Code now includes support for the FastAPI framework. This update enhances our ability to identify and analyze FastAPI-specific sources and sinks, improving the detection of security vulnerabilities in applications using this framework.&lt;/p&gt;
&lt;p&gt;This new feature is integrated into Snyk Code&#8217;s existing scanning processes and is available for use immediately for all Python rules. We recommend conducting a fresh scan to benefit from the updated functionality.&lt;/p&gt;
&lt;p&gt;As always, our goal is to assist you in enhancing your application's security by providing precise, framework-specific vulnerability detection. For detailed information or support, please reach out to your account team.&lt;/p&gt;
&lt;p&gt;Thank you for using Snyk Code to secure your software development.&lt;/p&gt;</description>
		</item>
		<item>
			<title>DeepCode AI Fix - VS Code UX Improvements</title>
			<pubDate>Wed, 24 Apr 2024 13:49:07 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#deepcode-ai-fix-vs-code-ux-improvements</link>
			<guid>https://snyk.gitbook.io/product-updates#deepcode-ai-fix-vs-code-ux-improvements_April_24_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very happy to introduce an improved DeepCode AI Fix experience for Visual Studio Code. Developers will have a more streamlined experience by:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Having visibility of how many issues are autofixable&lt;/li&gt;
&lt;li&gt;Being able to generate fixes from the issue details panel&lt;/li&gt;
&lt;li&gt;Having a preview of the possible fixes before they are applied&lt;/li&gt;
&lt;li&gt;Guidance to the code that has changed&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;These improvements come on top of our general fix quality improvements we have been working on, which you can read about on our &lt;a href="https://snyk.io/blog/ai-code-security-snyk-autofix-deepcode-ai/"&gt;new blog post!&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;For details on how to get started with DeepCode AI Fix and start fixing Snyk Code issues, please visit our &lt;a href="https://docs.snyk.io/scan-with-snyk/snyk-code/manage-code-vulnerabilities/fix-code-vulnerabilities-automatically#enable-deepcode-ai-fix"&gt;documentation&lt;/a&gt;.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/vs_code_ui.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;</description>
		</item>
		<item>
			<title>Test an SBOM using the Snyk CLI</title>
			<pubDate>Fri, 19 Apr 2024 17:19:48 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#test-an-sbom-using-the-snyk-cli</link>
			<guid>https://snyk.gitbook.io/product-updates#test-an-sbom-using-the-snyk-cli_April_19_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Early Access&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very pleased to announce that you can now use the Snyk CLI to scan CycloneDX and SPDX SBOM files!&lt;/p&gt;
&lt;p&gt;Snyk has enabled SBOM testing &lt;a href="https://apidocs.snyk.io/?version=2023-08-31\~beta#post-/orgs/-org_id-/sbom_tests"&gt;via the API&lt;/a&gt; for a while. Adding this to the CLI makes it significantly easier to test SBOMs produced using other tools, or SBOMs received from 3rd-party vendors.&lt;/p&gt;
&lt;p&gt;To get started install Snyk CLI &lt;a href="https://github.com/snyk/cli/releases/tag/v1.1290.0"&gt;v1.1290&lt;/a&gt; or above, and run the following command (using your actual SBOM file name &#128521;).&lt;/p&gt;
&lt;p&gt;&lt;code&gt;cli
snyk sbom test --experimental --file=bom.cdx.json&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;This feature is in Open Beta, the following SBOM formats are currently supported.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;CycloneDX: JSON version 1.4 and 1.5&lt;/li&gt;
&lt;li&gt;SPDX: JSON version 2.3&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;See &lt;code&gt;snyk help&lt;/code&gt; or &lt;a href="https://docs.snyk.io/snyk-cli/commands/sbom-test"&gt;Snyk User Docs&lt;/a&gt; for more usage details &#128588;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Free Plans Test Enforcement - Phase 1</title>
			<pubDate>Tue, 16 Apr 2024 18:25:44 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#free-plans-test-enforcement-phase-1</link>
			<guid>https://snyk.gitbook.io/product-updates#free-plans-test-enforcement-phase-1_April_16_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;For customers on free plans, we plan to implement hard enforcements on monthly test limits. Specifically, we are starting work on the enforcement of test limits through the push flow. The work will begin on Monday, April 29th and plan to be complete by Thursday, May 2nd.&lt;/p&gt;
&lt;p&gt;Please be aware that this feature will only impact customers on the free plan, who do not pay for any Snyk products. Customers with one or more paid products will not be affected by this feature.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Updated Project Page Layout</title>
			<pubDate>Fri, 12 Apr 2024 18:25:44 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#updated-project-page-layout</link>
			<guid>https://snyk.gitbook.io/product-updates#updated-project-page-layout_April_12_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;For your awareness, minor updates to our Project page will be introduced over the next week. In the topmost heading, tabs related to the project overview, history, and settings are migrating higher on the page. In addition, modifications will be made to the project breadcrumbs.&lt;/p&gt;
&lt;p&gt;Please be aware any temporary inconsistencies between organizations will resolve themselves shortly!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Automated Collections (Early Access)</title>
			<pubDate>Fri, 12 Apr 2024 18:25:44 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#automated-collections-(early-access)</link>
			<guid>https://snyk.gitbook.io/product-updates#automated-collections-(early-access)_April_12_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re happy to introduce Automated Collections to help you easily manage all your Snyk Projects.&lt;/p&gt;
&lt;p&gt;With Automated Collections enabled, similar Projects from different integration types are automatically grouped into a collection to filter and report on the issues of your preferred scanning method easily and hide duplicate results.&lt;/p&gt;
&lt;p&gt;You&#8217;ll find the option to enable Automated Collections under a new entry in the Organization Settings menu. After Automated Collections are enabled, it may take minutes (up to an hour) to analyze all the Organization&#8217;s Projects and group them by their Target URL.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Please note&lt;/strong&gt; that Collections and Automated Collections are only available for customers on the Snyk Enterprise plan. Read more about how &lt;a href="https://docs.snyk.io/snyk-admin/snyk-projects/automatically-created-project-collections"&gt;automatically created Project collections&lt;/a&gt; help you track issues, and contact your account team with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Configurable Python version in Snyk Open Source SCM scans is now GA!</title>
			<pubDate>Wed, 03 Apr 2024 17:51:27 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#configurable-python-version-in-snyk-open-source-scm-scans-is-now-ga!</link>
			<guid>https://snyk.gitbook.io/product-updates#configurable-python-version-in-snyk-open-source-scm-scans-is-now-ga!_April_3_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very pleased to announce that the option to define Python minor version when scanning pip projects via Git integrations is now GA!&lt;/p&gt;
&lt;p&gt;Until now, Snyk would always use either Python 2.7 or 3.7 which could lead to some dependencies being omitted from results if they require newer versions.&lt;/p&gt;
&lt;p&gt;You can now specify minor versions of Python 3 to use in scans, up to 3.12.&lt;/p&gt;
&lt;p&gt;To try this out go to Settings &amp;gt; Languages &amp;gt; Python and specify the Python version to use.&lt;/p&gt;
&lt;p&gt;For more details see the documentation &lt;a href="https://docs.snyk.io/scan-using-snyk/supported-languages-and-frameworks/python#pip-and-python-versions"&gt;available here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AppRisk Essentials: New features and unified UI</title>
			<pubDate>Thu, 28 Mar 2024 17:04:03 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#snyk-apprisk-essentials-new-features-and-unified-ui</link>
			<guid>https://snyk.gitbook.io/product-updates#snyk-apprisk-essentials-new-features-and-unified-ui_March_28_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're thrilled to announce the following improvements to Snyk AppRisk Essentials, which are available today on our platform:&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Snyk AppRisk is now unified into the Snyk platform user interface&lt;/strong&gt;. This eliminates the need to switch between separate web browser tabs. All Snyk AppRisk capabilities are available on Snyk&#8217;s main navigation menu at the Group level, and these navigation changes do not introduce any breaking changes.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;The Snyk AppRisk asset inventory now includes&lt;/strong&gt; &lt;a href="https://docs.snyk.io/manage-risk/snyk-apprisk/inventory-for-snyk-apprisk#assets-and-their-attributes"&gt;&lt;strong&gt;aggregate counts of Snyk issues&lt;/strong&gt;&lt;/a&gt; in the asset inventory for Snyk Open Source, Snyk Code, and Snyk Container. From a specific asset, you can navigate to the Insights UI to see more details on the issues that relate to the given asset.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Support for images as assets&lt;/strong&gt;. Snyk AppRisk now provides visibility into &lt;a href="https://docs.snyk.io/manage-risk/snyk-apprisk/inventory-for-snyk-apprisk/inventory-capabilities#image-assets"&gt;image assets&lt;/a&gt; scanned using Snyk Container. Image assets can be tagged and managed with policies (for example, for asset classification). Where relevant, Issue counts from Snyk Container issues are aggregated on the image asset.&lt;/p&gt;
&lt;p&gt;Please reach out to your account team if you have any questions on the above.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AppRisk - Bring Backstage Data into AppRisk</title>
			<pubDate>Mon, 25 Mar 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-Bring-Backstage-Data-into-AppRisk</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-Bring-Backstage-Data-into-AppRisk_March_25_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to share that Snyk AppRisk will allow customers to bring Backstage data into AppRisk as their org context information. You can now see the repo assets in AppRisk with the Backstage catalog info yaml file; this will make it easy for our user to manage their repo assets.&lt;/p&gt;
&lt;p&gt;What is this feature about? Enable customers to add catalog info yaml, allow the customer to bring their organizational context into AppRisk. Enrich repo assets with metadata from Backstage. This allows customers to filter the asset inventory and build policies based on Backstage metadata.&lt;/p&gt;
&lt;p&gt;This feature will be available for AppRisk Essentials and AppRisk Pro, which will be available for all SCM integrations that AppRisk supports.&lt;/p&gt;
&lt;p&gt;Please see our &lt;a href="https://docs.snyk.io/manage-risk/snyk-apprisk/integrations-for-snyk-apprisk/backstage-file-for-scm-integrations"&gt;Snyk documentation&lt;/a&gt; for more details, and contact your account team with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AppRisk - Two new filters in Policy Builder</title>
			<pubDate>Mon, 18 Mar 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-Two-new-filters-in-Policy-Builder</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-Two-new-filters-in-Policy-Builder_March_18_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to introduce two new filters to AppRisk Policies - &#8220;Repository Freshness&#8221; and &#8220;Source&#8221;. The two new filters unlock new use cases for policy creation. For example, users can now fine-tune policies with &#8220;repository freshness&#8221; condition to ignore inactive repositories. Additionally, they can take different actions for assets originating from different sources.&lt;/p&gt;
&lt;p&gt;Previously available only in Asset Inventory, these two filters are now seamlessly integrated into AppRisk Policies as well. For more information, please refer to &lt;a href="https://docs.snyk.io/manage-risk/snyk-apprisk/policies-for-snyk-apprisk/create-policies"&gt;Snyk documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>License issues alignment in reporting</title>
			<pubDate>Thu, 29 Feb 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#License-issues-alignment-in-reporting</link>
			<guid>https://snyk.gitbook.io/product-updates#License-issues-alignment-in-reporting_February_29_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;In about a week, Snyk will update the logic for &lt;strong&gt;counting license issues&lt;/strong&gt; in both Reports and Enterprise Analytics pages to better align with the way license issues are counted in Snyk projects page and Issues API. This will provide customers with a more consistent user experience across Snyk platform and ensure that license issue counts received from different Snyk interfaces are aligned. Customers using Snyk Open Source will see fewer issues in reporting once this change is applied, as the paths by which an issue is introduced will no longer be counted separately. Please reach out to your account team with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New CWE TOP 10 KEV (Known Exploited Vulnerabilities) Report</title>
			<pubDate>Mon, 26 Feb 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#New-CWE-TOP-10-KEV-(Known-Exploited-Vulnerabilities)-Report</link>
			<guid>https://snyk.gitbook.io/product-updates#New-CWE-TOP-10-KEV-(Known-Exploited-Vulnerabilities)-Report_February_26_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to share the availability of a new report - &lt;strong&gt;CWE TOP 10 KEV&lt;/strong&gt; (Known Exploited Vulnerabilities).&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;CISA&lt;/strong&gt;:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;In 2021, the &lt;a href="https://www.dhs.gov/cisa/cybersecurity-division"&gt;Cybersecurity and Infrastructure Security Agency (CISA)&lt;/a&gt; began publishing the &lt;a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog"&gt;Known Exploited Vulnerabilities (KEV) Catalog&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;The CVEs in this catalog are vulnerabilities reported as actively exploited. CISA recommends that organizations monitor the KEV catalog and use its content to help prioritize remediation activities in their systems to reduce the likelihood of compromise.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;The new KEV report&lt;/strong&gt;:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;In December 2023, MITRE published an analysis of the TOP 10 exploitable CWEs for the first time. For each CWE, MITRE looked at how many CVEs are assigned to it in the KEV catalog and their average CVSS score.&lt;/li&gt;
&lt;li&gt;The list contains &lt;a href="https://cwe.mitre.org/top25/archive/2023/2023_kev_list.html"&gt;10 prioritized CWEs&lt;/a&gt; that, if addressed, can reduce the risk of exploitation.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The new report provides an additional approach to managing and prioritizing risk according to industry standards in addition to the OWASP TOP 10 (2021) and the CWE TOP 25 (2023) reports.&lt;/p&gt;
&lt;p&gt;Learn more by reading the documentation &lt;a href="https://docs.snyk.io/manage-risk/reporting/available-snyk-reports"&gt;available here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Targets API endpoint release to GA!</title>
			<pubDate>Mon, 26 Feb 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Targets-API-endpoint-release-to-GA!</link>
			<guid>https://snyk.gitbook.io/product-updates#Targets-API-endpoint-release-to-GA!_February_26_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Deprecated&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Following the release of the &lt;a href="https://apidocs.snyk.io/?version=2024-01-04\~beta#tag--Targets"&gt;Targets API beta&lt;/a&gt;, we were given feedback that users had some issues with the naming conventions, would like to see the prefix updated to be consistent with standards used in other endpoints, and we were also given feedback that we&#8217;re missing various fields and filters which were supported in other versions of the API (including via the projects API).&lt;/p&gt;
&lt;p&gt;With that, we're proud to announce that we've taken that feedback on board, addressed the points, and have released the &lt;a href="https://apidocs.snyk.io/?version=2024-02-21#get-/orgs/-org_id-/targets"&gt;GA version of the Targets API&lt;/a&gt;!&lt;/p&gt;
&lt;p&gt;With the GA release of any API in Snyk, the GA release of this endpoint (which is a huge improvement on the beta) means the beta version is automatically deprecated, and users are highly recommended to upgrade to the GA version as soon as possible.&lt;/p&gt;
&lt;p&gt;We are not removing the beta endpoint yet, and you can still continue using it.&lt;/p&gt;
&lt;p&gt;However, after 90 days, we can remove the API endpoint. We will communicate regularly that the GA endpoint is available to upgrade to, and that we will remove the endpoint as we approach the time.&lt;/p&gt;
&lt;p&gt;When we remove the beta API, you will be greeted by an &lt;code&gt;http 404 error&lt;/code&gt;, and the simple fix is to upgrade to the latest version.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Revamped Group-Level Organization Page</title>
			<pubDate>Sun, 18 Feb 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Revamped-Group-Level-Organization-Page</link>
			<guid>https://snyk.gitbook.io/product-updates#Revamped-Group-Level-Organization-Page_February_18_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The Group Organizations page for Enterprise customers just got a facelift!&lt;/p&gt;
&lt;p&gt;The new cleaner look makes viewing your Organizations and joining new ones a breeze. The new page is faster and includes a brand-new workflow for joining Organizations without the need for manual emails.&lt;/p&gt;
&lt;p&gt;Read more about how to &lt;a href="https://docs.snyk.io/snyk-admin/manage-users-in-organizations-and-groups/requests-for-access-to-an-organization"&gt;request access to an Organization&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container - Custom base image recommendations is now GA</title>
			<pubDate>Mon, 12 Feb 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-Container-Custom-base-image-recommendations-is-now-GA</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-Container-Custom-base-image-recommendations-is-now-GA_February_12_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the GA release of the Custom Base Image Recommendations feature of Snyk Container, bringing a more customized experience to our enterprise customers, allowing developers to utilize the most secure images from their organizations' internal pool of approved images (often referred to as &#8220;golden images&#8221;).&lt;/p&gt;
&lt;p&gt;The General Availability version delivers:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;API endpoints for all custom base image actions to allow automation and smooth integration into existing processes.&lt;/li&gt;
&lt;li&gt;All API functionality is now also available in the browser GUI, allowing users to define custom versioning schemas from the project&#8217;s settings.&lt;/li&gt;
&lt;li&gt;Removed feature flag - by default, Custom Base Image Recommendations settings will be shown in the project&#8217;s settings.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;{% hint style="info" %}
&lt;strong&gt;Please note&lt;/strong&gt; that this feature is only available for customers on the Snyk &lt;strong&gt;Enterprise&lt;/strong&gt; plan. More details on the feature are available in the &lt;a href="https://docs.snyk.io/products/snyk-container/getting-around-the-snyk-container-ui/custom-base-image-recommendations"&gt;public&lt;/a&gt; and &lt;a href="https://apidocs.snyk.io/?version=2024-01-23#tag--Custom-Base-Images"&gt;API&lt;/a&gt; documentation.
{% endhint %}&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AppRisk - Policy Templates</title>
			<pubDate>Mon, 05 Feb 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-Policy-Templates</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-Policy-Templates_February_5_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce Policy Templates for Snyk AppRisk.&lt;/p&gt;
&lt;p&gt;Policy Templates help AppRisk users create policies by offering ready-to-use templates that cover common use cases. In addition to creating a policy from scratch, users can now start with one of four out-of-the-box templates and tailor it to their unique requirements.&lt;/p&gt;
&lt;p&gt;For more information, please refer to &lt;a href="https://docs.snyk.io/manage-risk/snyk-apprisk/policies-for-snyk-apprisk/create-policies#use-a-template-policy-creation"&gt;Snyk documentation&lt;/a&gt; and watch the Policy Templates overview &lt;a href="https://www.youtube.com/embed/CtC7tGGNijY"&gt;video&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>The New REST Issues API is now GA</title>
			<pubDate>Mon, 29 Jan 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#The-New-REST-Issues-API-is-now-GA</link>
			<guid>https://snyk.gitbook.io/product-updates#The-New-REST-Issues-API-is-now-GA_January_29_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the General Availability of the Unified Issues API, which unifies all Snyk issues (SCA, SAST, IaC+) across projects or orgs into one API call. The Unified Issues API approach offers several key benefits:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Simplifies the user experience with one paginated API call across all projects or orgs&lt;/li&gt;
&lt;li&gt;Saves time by eliminating the need to stitch data across API calls and offering a consistent schema to parse responses with&lt;/li&gt;
&lt;li&gt;Highlights our commitment to building Snyk as a holistic security platform for our customers&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The General Availability delivers:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Uniform issue representation from Code to IaC+, with improved data quality and increased reliability&lt;/li&gt;
&lt;li&gt;Detailed representations for Open Source packages and fix information&lt;/li&gt;
&lt;li&gt;Improved pagination and response management, simplifying the API interaction&lt;/li&gt;
&lt;li&gt;New filters for tailored API responses, catering to specific querying needs&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Please check out the API docs for &lt;a href="https://apidocs.snyk.io/?version=2024-01-23#get-/groups/-group_id-/issues"&gt;listing all issues by group&lt;/a&gt;, and &lt;a href="https://apidocs.snyk.io/?version=2024-01-23#get-/orgs/-org_id-/issues"&gt;by org&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Note&lt;/strong&gt;: the experimental versions of this endpoint will be deprecated in 30 days, while the beta version will be deprecated in 90 days. If you have any concerns with the deprecation timelines for experimental or beta endpoints of this API, please contact your account representative.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AppRisk - View Only Permission</title>
			<pubDate>Mon, 29 Jan 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-View-Only-Permission</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-AppRisk-View-Only-Permission_January_29_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that the Snyk AppRisk support View Only permission.&lt;/p&gt;
&lt;p&gt;View Only permission for Snyk AppRisk will enable you to give view only permission to Snyk AppRisk, so it is minimizes the need for you to give full access to Snyk AppRisk to your team members.&lt;/p&gt;
&lt;p&gt;For more details, see the documentation &lt;a href="https://docs.snyk.io/manage-risk/snyk-apprisk/getting-started-with-snyk-apprisk#permissions"&gt;available here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code - DeepCode AI Fix now supports 7 languages</title>
			<pubDate>Mon, 29 Jan 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-Code-DeepCode-AI-Fix-now-supports-7-languages</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-Code-DeepCode-AI-Fix-now-supports-7-languages_January_29_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://docs.snyk.io/scan-using-snyk/snyk-code/exploring-and-working-with-snyk-code-results-in-the-web-ui/fix-code-issues-automatically-with-deepcode-ai-fix-suggestions"&gt;DeepCode AI Fix&lt;/a&gt; helps you automatically fix security issues identified by Snyk Code in the IDE (VS Code and Eclipse) using Snyk's DeepCode AI model.&lt;/p&gt;
&lt;p&gt;Over the last few months, the team has been continuously adding depth to JS/TS fixes, and we are excited to share the support for 6 additional languages. DeepCode AI Fix now supports:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Javascript and Typescript&lt;/li&gt;
&lt;li&gt;Java&lt;/li&gt;
&lt;li&gt;Python&lt;/li&gt;
&lt;li&gt;C/C++&lt;/li&gt;
&lt;li&gt;Go (Limited support)&lt;/li&gt;
&lt;li&gt;C# (Limited support)&lt;/li&gt;
&lt;li&gt;APEX (Limited support)&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Visit our documentation to learn &lt;a href="https://docs.snyk.io/scan-using-snyk/snyk-code/exploring-and-working-with-snyk-code-results-in-the-web-ui/fix-code-issues-automatically-with-deepcode-ai-fix-suggestions#enable-deepcode-ai-fix"&gt;how to try it out&lt;/a&gt;!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source Gradle 8 CLI support</title>
			<pubDate>Fri, 26 Jan 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-Open-Source-Gradle-8-CLI-support</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-Open-Source-Gradle-8-CLI-support_January_26_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that the Snyk CLI now supports scanning &lt;a href="https://gradle.org/whats-new/gradle-8/"&gt;Gradle 8&lt;/a&gt; projects!&lt;/p&gt;
&lt;p&gt;Previously, when scanning version 8 projects in the CLI, some operations might fail due to incompatibility with the Gradle configuration cache. This has now been resolved, and Gradle 8 is &lt;a href="https://docs.snyk.io/scan-using-snyk/supported-languages-and-frameworks/java-and-kotlin"&gt;officially supported&lt;/a&gt; in the Snyk CLI. &#127881;&lt;/p&gt;
&lt;p&gt;Upgrade to &lt;a href="https://github.com/snyk/cli/releases/tag/v1.1273.0"&gt;CLI v1.1273.0&lt;/a&gt; or above to scan your Gradle 8 applications.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk CLI Improvement: Auth tokens redacted</title>
			<pubDate>Mon, 08 Jan 2024 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates#Snyk-CLI-Improvement-Auth-tokens-redacted</link>
			<guid>https://snyk.gitbook.io/product-updates#Snyk-CLI-Improvement-Auth-tokens-redacted_January_8_2024</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;With our customers and users security in mind, from version &lt;a href="https://github.com/snyk/cli/releases/tag/v1.1268.0"&gt;v1.1268.0&lt;/a&gt; onwards, &lt;a href="https://docs.snyk.io/snyk-cli"&gt;Snyk CLI&lt;/a&gt; will redact &lt;a href="https://docs.snyk.io/getting-started/how-to-obtain-and-authenticate-with-your-snyk-api-token"&gt;Snyk API authentication tokens&lt;/a&gt; from its &lt;a href="https://docs.snyk.io/snyk-cli/commands#debug"&gt;debug&lt;/a&gt; logs.&lt;/p&gt;
&lt;p&gt;Once upgraded, when Snyk users run the following commands to enable Snyk CLI debug logs,&lt;/p&gt;
&lt;p&gt;&lt;code&gt;DEBUG=* snyk test -d&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;or&lt;/p&gt;
&lt;p&gt;&lt;code&gt;DEBUG=snyk* snyk test -d&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;they will see API authentication redacted and displayed as &lt;code&gt;***&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;An example of this change is inline:&lt;/p&gt;
&lt;p&gt;&lt;code&gt;bash
// Some codesnyk request body size: 1219
snyk gzipped request body size: 666
snyk:req request payload: {"url": "https://api.snyk.io/v1/analytics/cli","json":true, "method": "post", "headers": {"authorization": "token ***" ,"x-snyk-cli-version"&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;Snyk API authentication tokens will be redacted from Snyk CLI debug logs for both &lt;a href="https://docs.snyk.io/enterprise-setup/service-accounts"&gt;service&lt;/a&gt; as well as individual Snyk accounts.&lt;/p&gt;
&lt;p&gt;We recommend upgrading to &lt;a href="https://github.com/snyk/cli/releases/tag/v1.1268.0"&gt;v1.1268.0&lt;/a&gt; to benefit from this change.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Configurable Python version in Snyk Open Source SCM scans in Open Beta</title>
			<pubDate>Tue, 19 Dec 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Configurable-Python-version-in-Snyk-Open-Source-SCM-scans-in-Open-Beta</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Configurable-Python-version-in-Snyk-Open-Source-SCM-scans-in-Open-Beta_December_19_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Open beta&lt;/p&gt;
&lt;p&gt;We are very pleased to announce that you can now define the Python version used when scanning &lt;code&gt;pip&lt;/code&gt; projects imported via Git integrations in Snyk Open Source!&lt;/p&gt;
&lt;p&gt;Until now, Snyk would always use either Python 2.7 or 3.7 which could lead to some dependencies being omitted from results if they require newer versions.&lt;/p&gt;
&lt;p&gt;You can now specify the minor version of Python to use in scans.&lt;/p&gt;
&lt;p&gt;To try this out go to your Organization Settings. First enable the beta listed in &lt;strong&gt;Snyk Preview&lt;/strong&gt;. Next, go to &lt;strong&gt;Languages&lt;/strong&gt; &amp;gt; &lt;strong&gt;Python&lt;/strong&gt; and specify the Python version to use.&lt;/p&gt;
&lt;p&gt;For more details see the documentation &lt;a href="https://docs.snyk.io/scan-using-snyk/supported-languages-and-frameworks/python#pip-and-python-versions"&gt;available here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AppRisk Essentials is Snyk&#8217;s new ASPM product</title>
			<pubDate>Tue, 12 Dec 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-AppRisk-Essentials-is-Snyks-new-ASPM-product</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-AppRisk-Essentials-is-Snyks-new-ASPM-product_December_12_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk AppRisk Essentials is Snyk&#8217;s new ASPM product, and is now available for qualified customers.&lt;/p&gt;
&lt;p&gt;Snyk AppRisk Essentials supports the following use cases:&lt;/p&gt;
&lt;p&gt;Automate application asset discovery: Continually discover application assets and classify them by business context, ensuring a security program is fully in sync with developers. Manage security coverage: Define and manage appropriate security and compliance requirements while verifying applications have the correct controls in place., Prioritize based on risk: Blend business and application context with best-in-class security and fix analysis to quantify risk and create an evidence graph, ensuring developer remediation efforts are focused on the issues that matter most to the business.&lt;/p&gt;
&lt;p&gt;You can learn more by reading our &lt;a href="https://snyk.io/blog/announcing-snyk-apprisk-aspm"&gt;blog post&lt;/a&gt; and &lt;a href="https://docs.snyk.io/manage-risk/snyk-apprisk"&gt;public documentation&lt;/a&gt; and &lt;a href="https://learn.snyk.io/lesson/snyk-apprisk-essentials/"&gt;training&lt;/a&gt;, and by reaching out to your account team.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Using Project Tags at scale with removed group limits and predictable permissions</title>
			<pubDate>Mon, 11 Dec 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Using-Project-Tags-at-scale-with-removed-group-limits-and-predictable-permissions</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Using-Project-Tags-at-scale-with-removed-group-limits-and-predictable-permissions_December_11_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://docs.snyk.io/snyk-admin/introduction-to-snyk-projects/project-tags"&gt;Project Tags&lt;/a&gt; are a lightweight and easy way to organise your Projects into bespoke criteria. They also have great synergy with &lt;a href="https://updates.snyk.io/project-collections-ga-268069"&gt;Project Collections&lt;/a&gt; to help you visualise your grouping criteria (such as teams or services), focus work, and generate reports.&lt;/p&gt;
&lt;p&gt;However, there has traditionally been a couple of points of friction when it comes to using tags at scale:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;You could only create 1000 tags per group, which meant that you might hit your limit quickly (even with good tag management).&lt;/li&gt;
&lt;li&gt;Different permissions were required to create a tag within a group, and assign a tag to a Project, so even if you had an org role that would allow you to work with tags on a project, you might not have the group permission that allowed you to create the tag.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Ultimately, users want the ability to group their Projects by any criteria without any limits, and to not work inefficiently because they're blocked by permission issues. So we're pleased to announce that we have removed the group tag limit, and we're making tag permissions more predictable in behaviour.&lt;/p&gt;
&lt;p&gt;The org permission to assign and remove a tag to a project is now sufficient for all tags and will be applied to &lt;code&gt;group admin&lt;/code&gt;, &lt;code&gt;org admin&lt;/code&gt;, and &lt;code&gt;collaborator&lt;/code&gt; roles whilst the permissions for custom roles will remain as they were before this work was delivered. The two differences to your experience will be:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;When you create a custom role, you do not require separate group permission to work with tags, which also helps improve security as you don't need to provide users with group permissions to enable org level functionality.&lt;/li&gt;
&lt;li&gt;The concept of creating and deleting a tag no longer exists. If a tag isn't assigned to a Project, it will not exist.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;All of the Project Tag APIs will continue to work as they currently do today.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Slack App: Channel ID entry for configuration</title>
			<pubDate>Fri, 08 Dec 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Slack-App-Channel-ID-entry-for-configuration</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Slack-App-Channel-ID-entry-for-configuration_December_8_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to share an update for the Slack app, introducing a new method for configuring channels to receive notifications. This addresses slow loading times for channel lists by enabling users to input Channel IDs directly. This enhancement ensures a quick verification process and immediate access to channel information, such as the name, right after entering the ID. Experience improved efficiency and responsiveness with this update.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/slack_channel_id_setting.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;For more details, please refer to our &lt;a href="https://docs.snyk.io/integrate-with-snyk/notification-and-ticketing-systems-integraitons/slack-app"&gt;User docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source: Pipenv Git support now GA</title>
			<pubDate>Fri, 08 Dec 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Pipenv-Git-support-now-GA</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Pipenv-Git-support-now-GA_December_8_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very pleased to announce that Snyk Open Source support for scanning &lt;a href="https://pipenv-fork.readthedocs.io/en/latest/index.html"&gt;Pipenv&lt;/a&gt; projects via Git integrations is now GA!&lt;/p&gt;
&lt;p&gt;The Open Beta for Pipenv Git support has been enabled by default &lt;a href="https://updates.snyk.io/snyk-open-source-pipenv-git-support-272725"&gt;since September&lt;/a&gt;, and we are now happy that this is now working well enough to be promoted to GA.&lt;/p&gt;
&lt;p&gt;For more details, head over to the &lt;a href="https://docs.snyk.io/scan-using-snyk/supported-languages-and-frameworks/python#pipenv-and-git-repositories"&gt;docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Reminder: v1 List All Projects API end-of-life and upcoming brownout</title>
			<pubDate>Mon, 04 Dec 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Reminder-v1-List-All-Projects-API-end-of-life-and-upcoming-brownout</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Reminder-v1-List-All-Projects-API-end-of-life-and-upcoming-brownout_December_4_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Deprecated&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We announced on &lt;a href="https://headwayapp.co/snyk-io-updates/deprecation-and-end-of-life-for-the-list-all-projects-v1-api-267781"&gt;June 22nd&lt;/a&gt; that we will end-of-life the &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;v1 List All Projects API&lt;/a&gt; on December 22nd. Alongside the announcement, we have shared a &lt;a href="https://go.snyk.io/rs/677-THP-415/images/Snyk%20v1%20API%20Migration%20Guide.pdf"&gt;migration guide&lt;/a&gt; and have released enhancements to our &lt;a href="https://apidocs.snyk.io/?version=2023-11-27#get-/orgs/-org_id-/projects"&gt;GA REST APIs&lt;/a&gt; to help facilitate the migration. These APIs will provide more consistent versioning, pagination and caching, and improved performance for you.&lt;/p&gt;
&lt;p&gt;In addition, we have had two brownouts in &lt;a href="https://headwayapp.co/snyk-io-updates/scheduled-brownouts-for-the-list-all-projects-v1-api-endpoint-276313"&gt;October&lt;/a&gt; and &lt;a href="https://updates.snyk.io/reminder-v1-list-all-projects-api-end-of-life-and-upcoming-brownouts-278768"&gt;November&lt;/a&gt;, and there is one more to go on December 6th for 4 hours starting 17:00 UTC.&lt;/p&gt;
&lt;p&gt;During this time window, the API will return &lt;code&gt;410 Gone&lt;/code&gt; for all requests. If you require further support during these windows, please raise a support ticket. Review the migration guide below and move all your automations over before December 22, 2023!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Announcing Import API Location header change and support for all Snyk environments</title>
			<pubDate>Fri, 01 Dec 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Announcing-Import-API-Location-header-change-and-support-for-all-Snyk-environments</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Announcing-Import-API-Location-header-change-and-support-for-all-Snyk-environments_December_1_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We recently released a minor change to the &lt;a href="https://snyk.docs.apiary.io/#reference/import-projects/import/import-targets"&gt;Import Targets API&lt;/a&gt;. This asynchronous API spawns a separate import job, and returns a &lt;code&gt;201 Created&lt;/code&gt; response and a &lt;code&gt;Location&lt;/code&gt; header which should be followed to fetch additional progress details about the import job.&lt;/p&gt;
&lt;p&gt;Previously, the Location header was only valid on Snyk&#8217;s US-based region. But following this change, the &lt;code&gt;Location&lt;/code&gt; header is now a valid URL across all &lt;a href="https://docs.snyk.io/more-info/data-residency-at-snyk#what-regions-are-available"&gt;available regions&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you are performing validation on the &lt;code&gt;Location&lt;/code&gt; header, e.g. to verify it is a domain owned by Snyk before following the URL, please update your validation for your appropriate region URL. Snyk&#8217;s region-specific URLs are available &lt;a href="https://docs.snyk.io/more-info/data-residency-at-snyk#what-regions-are-available"&gt;here&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For any additional questions, &lt;a href="https://support.snyk.io/hc/en-us"&gt;please contact support&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: APEX, Go, Java, PHP, Python, Ruby</title>
			<pubDate>Thu, 30 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-APEX,-Go,-Java,-PHP,-Python,-Ruby</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-APEX,-Go,-Java,-PHP,-Python,-Ruby_November_30_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the next two weeks, we continue to enhance Snyk Code. As a result, we will be making the following improvements:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;APEX: Enabling interfile support. Potential increase in all issues. This will be released week of December 11th&lt;/li&gt;
&lt;li&gt;Go: Source improvements to add buffers and refactoring CMDI sources. Potential increase in all issues&lt;/li&gt;
&lt;li&gt;Java: Sanitizer improvements enabling detection of ContentType. Potential decrease in CWE-79 issues&lt;/li&gt;
&lt;li&gt;PHP: Additional improvements released for PHP interfile. Potential increase in issues&lt;/li&gt;
&lt;li&gt;Python: Sanitizer improvements enabling detection of ContentType for frameworks including Django and Flask. Potential decrease in CWE-79 issues&lt;/li&gt;
&lt;li&gt;Ruby: General sanitizer improvements. Potential decrease in all issues&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source - Upcoming End-of-Life Notice for Copyright Service: Effective January 8, 2024</title>
			<pubDate>Thu, 30 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Upcoming-End-of-Life-Notice-for-Copyright-Service-Effective-January-8,-2024</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Upcoming-End-of-Life-Notice-for-Copyright-Service-Effective-January-8,-2024_November_30_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Deprecated&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Open Source product&#8217;s copyright feature provides the copyright information of your open source dependencies. Please note that access to such copyright data via the &lt;a href="https://snyk.docs.apiary.io/#reference/dependencies"&gt;Dependencies API&lt;/a&gt; and &lt;a href="https://docs.snyk.io/manage-risk/dependencies-and-licenses/view-dependencies"&gt;Dependencies Report&lt;/a&gt; will not be available from &lt;strong&gt;January 8th, 2024&lt;/strong&gt;.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/dependencies_report.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;From January 8th, 2024, &lt;a href="https://docs.snyk.io/manage-risk/dependencies-and-licenses/view-dependencies"&gt;the Dependencies report&lt;/a&gt;, the csv export from this report, and the &lt;a href="https://snyk.docs.apiary.io/#reference/dependencies"&gt;Dependencies API&lt;/a&gt; will no longer display copyright data per dependency. Snyk&#8217;s &lt;a href="https://github.com/snyk-tech-services/snyk-licenses-texts"&gt;License text tool&lt;/a&gt; will also no longer produce the copyright information.&lt;/p&gt;
&lt;p&gt;Please keep in mind that only the copyright data per dependency is being EOL&#8217;d. License data per dependency will continue to exist.&lt;/p&gt;
&lt;p&gt;We are actively exploring ways to reintegrate this data in future iterations of our roadmap.&lt;/p&gt;
&lt;p&gt;Thank you for your continued support of our services. If you have any questions or concerns, please do not hesitate to reach out to our customer support team.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Announcement: GA of C/C++</title>
			<pubDate>Tue, 28 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-GA-of-C/C++</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-GA-of-C/C++_November_28_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce that on Tuesday, December 5th, we will officially launch GA support for C/C++, enabled for all customers. This milestone follows substantial improvements driven by valuable feedback from customer support tickets, calls, and improvements through benchmark applications and open-source repositories. Note that we do not currently support macros and code quality.&lt;/p&gt;
&lt;p&gt;For customers with C/C++ code, please anticipate a potential increase in issues.&lt;/p&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>"Project Type" filter</title>
			<pubDate>Mon, 27 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Project-Type-filter</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Project-Type-filter_November_27_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As your organisation grows, the number and variety of Project types in your system also scales, so the ability to find the Projects you work with can become more difficult. Features such as &lt;a href="https://updates.snyk.io/project-collections-ga-268069"&gt;Project Collections&lt;/a&gt; improve the ability to organise and work with Projects at scale, so it's important to improve how they can be created.&lt;/p&gt;
&lt;p&gt;We're pleased to announce that we've added a "Project Type" filter to the Project Listing page which will improve a user's ability to find the Projects they need to work with. By filtering your Projects by type, you can perform actions such as tagging and creating Project Collections more easily.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/project_type_filter.png" alt="" width="327"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: JavaScript, PHP</title>
			<pubDate>Wed, 22 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-JavaScript,-PHP</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-JavaScript,-PHP_November_22_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the next two weeks, we continue to enhance Snyk Code. As a result, we will be making the following improvements in the next few weeks:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;JavaScript: Adding support for node-forge npm library. Potential increase in results, specifically increase Increase in results pertaining CWEs that represent cryptographic weaknesses: CWE-310, CWE-547, CWE-916, CWE-327&lt;/li&gt;
&lt;li&gt;PHP: Adding PHP Drupal support. Potential increase in all issues&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>GitHub Cloud App available in Open Beta</title>
			<pubDate>Mon, 20 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#GitHub-Cloud-App-available-in-Open-Beta</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#GitHub-Cloud-App-available-in-Open-Beta_November_20_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Today, Snyk is announcing the Open Beta availability of the GitHub Cloud app. The GitHub Cloud App represents a significant advancement over our current GitHub integrations, offering enhanced features such as role-based, granular access control, increased API rate limits, and serving as a foundation for expanded and enriched developer experiences.&lt;/p&gt;
&lt;p&gt;After we make this generally available next year, our intention is that this app will replace the existing OAuth (aka "GitHub Enterprise") and PAT (aka "GitHub") based GitHub integrations on our platform.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/github_cloud_app_integration.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;The Open Beta kicks off with customers in the US-based instance (app.snyk.io) using GitHub Cloud, and supports a single GitHub Org for a Snyk Org. Over the next month, we are committed to further refining the Cloud app, introducing the following improvements:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;In the upcoming month, we plan to extend support to EU and AU environments and enable a single GitHub Org to connect with multiple Snyk Orgs.&lt;/li&gt;
&lt;li&gt;By the end of the year, we will extend this functionality to customers using GitHub Server (on-prem).&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;We encourage you to connect with your account teams to opt-in, refer to our &lt;a href="https://docs.snyk.io/integrate-with-snyk/git-repository-scm-integrations/snyk-github-cloud-app"&gt;User Docs&lt;/a&gt; for more detailed information. Please don't hesitate to reach out if you have any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code: PR Checks Reliability Update New Improved</title>
			<pubDate>Sat, 18 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-PR-Checks-Reliability-Update-New-Improved</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-PR-Checks-Reliability-Update-New-Improved_November_18_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;At Snyk Code we have been focused on improving the reliability of Snyk Code PR Checks. We released at the end of October an update to one of our most error-prone services, and we have seen major improvements in the reliability, with the service going from being part of 50% of all errors, to close to none. Today, we have rolled out this improvement to all environments.&lt;/p&gt;
&lt;p&gt;For customers using Snyk Code PR Checks through the Snyk Broker:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Please update the Broker to version 4.168.4 or higher (recommended to go to the latest version).&lt;/li&gt;
&lt;li&gt;If you are using a custom accept.json, update to the latest rules.&lt;/li&gt;
&lt;li&gt;If you are using Bitbucket, please make sure you are using Bitbucket 7.0 or above.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;We continue to improve the overall reliability and scalability of Snyk Code, and we will have more updates in the coming months. If you have any questions, please reach out to your account teams. Thank you.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code: PHP Interfile Re-release</title>
			<pubDate>Wed, 15 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-PHP-Interfile-Re-release</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-PHP-Interfile-Re-release_November_15_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the past few weeks, we&#8217;ve been working to find the root cause and to update internal testing to ensure we identify these type of issues prior to production. As of today, we have turned on the first batch of rules for PHP interfile.&lt;/p&gt;
&lt;p&gt;We are rolling out changes in how the analysis handles data flow which will result in significantly shorter and more accurate data flow in complex cases. From our testing, we expect this will change between 0.5-1% of issues across all languages.&lt;/p&gt;
&lt;p&gt;After this step, pending positive internal testing, all the PHP interfile rules will be re-enabled over the next two weeks.&lt;/p&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Removing friction when changing test frequency for Projects in the UI</title>
			<pubDate>Wed, 15 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Removing-friction-when-changing-test-frequency-for-Projects-in-the-UI</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Removing-friction-when-changing-test-frequency-for-Projects-in-the-UI_November_15_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Earlier this year, we &lt;a href="https://headwayapp.co/snyk-io-updates/project-collections-ga-268069"&gt;migrated the ability&lt;/a&gt; to perform bulk actions in the Project Listing Page from the Usage page. Another bulk action which was available on the usage page was the "Change Test Frequency" functionality.&lt;/p&gt;
&lt;p&gt;To remove friction where you'd have to jump between pages to perform bulk actions on Projects, we've migrated the Change Test Frequency functionality to the Project Listing Page.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/change_test_frequency.png" alt="" width="310"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;For more information on the functionality, check out the &lt;a href="https://docs.snyk.io/snyk-admin/introduction-to-snyk-projects"&gt;user documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Making Project Collections more discoverable and Target centric</title>
			<pubDate>Tue, 14 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Making-Project-Collections-more-discoverable-and-Target-centric</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Making-Project-Collections-more-discoverable-and-Target-centric_November_14_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;In June, we &lt;a href="https://headwayapp.co/snyk-io-updates/project-collections-ga-268069"&gt;announced&lt;/a&gt; the general availability of Project Collections. Since then, we've been gathering feedback on the feature's usability as we aim to go deeper on the experience with &lt;a href="https://headwayapp.co/snyk-io-updates/deduplicating-targets-through-automatically-created-project-collections-276359"&gt;automatically created Project Collections&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Based on the feedback, we needed to improve the discoverability of the feature and the experience for users who work on the Target-level. Therefore, we've just released a couple of improvements to the existing functionality:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Collections are now present in the Projects area as a standalone tab so that anyone can dive into them quickly and easily.&lt;/li&gt;
&lt;li&gt;You can see at a glance which Target a Project belongs to within a Collection as we have added a sortable Target column. In addition, we've enabled the ability to filter by Target within a Collection.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;We'll be adding more usability improvements to the feature over time, so your feedback is valued. For more information, head to the &lt;a href="https://docs.snyk.io/snyk-admin/introduction-to-snyk-projects/project-collections-groupings/project-collections"&gt;user documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Reminder: v1 List All Projects API end-of-life and upcoming brownouts</title>
			<pubDate>Thu, 09 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Reminder-v1-List-All-Projects-API-end-of-life-and-upcoming-brownouts</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Reminder-v1-List-All-Projects-API-end-of-life-and-upcoming-brownouts_November_9_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Deprecated&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We announced on &lt;a href="https://headwayapp.co/snyk-io-updates/deprecation-and-end-of-life-for-the-list-all-projects-v1-api-267781"&gt;June 22nd&lt;/a&gt; that we will end-of-life the v1 List All Projects API on December 22nd. Alongside the announcement, we have shared a &lt;a href="https://go.snyk.io/rs/677-THP-415/images/Snyk%20v1%20API%20Migration%20Guide.pdf"&gt;migration guide&lt;/a&gt; and have released enhancements to our &lt;a href="https://apidocs.snyk.io/?version=2023-11-06\~beta#get-/orgs/-org_id-/projects"&gt;GA REST APIs&lt;/a&gt; to help facilitate the migration. These APIs will provide more consistent versioning, pagination and caching, and improved performance for you.&lt;/p&gt;
&lt;p&gt;In addition, we have two &lt;a href="https://headwayapp.co/snyk-io-updates/scheduled-brownouts-for-the-list-all-projects-v1-api-endpoint-276313"&gt;brownouts scheduled&lt;/a&gt; where we will be periodically removing this endpoint for a set period of time:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;November 16th for 2 hours starting at 6:00 UTC&lt;/li&gt;
&lt;li&gt;December 6th for 4 hours starting 17:00 UTC&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;During this time window, the API will return 410 Gonefor all requests. If you require further support during these windows, please raise a support ticket. Review the migration guide below and move all your automations over before December 22, 2023!&lt;/p&gt;</description>
		</item>
		<item>
			<title>CVE and NVD CVSS Score Enhancements - Upcoming Data Changes</title>
			<pubDate>Mon, 06 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#CVE-and-NVD-CVSS-Score-Enhancements-Upcoming-Data-Changes</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#CVE-and-NVD-CVSS-Score-Enhancements-Upcoming-Data-Changes_November_6_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;On &lt;strong&gt;November 14th&lt;/strong&gt;, Snyk will roll out a change that will broaden Snyk Open Source vulnerabilities granularity to support CVSS vectors assigned by NVD, to support additional compliance workflows.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;Background on Snyk IDs and CVE IDs&lt;/strong&gt;:&lt;/h4&gt;
&lt;p&gt;For each new vulnerability, Snyk assigns a unique Snyk Identifier (SNYK-ID) and CVSS vector (which translates to score and severity)&lt;/p&gt;
&lt;p&gt;This allows Snyk:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;To publish new vulnerabilities faster, even before they have an officially assigned CVE ID.&lt;/li&gt;
&lt;li&gt;To represent the issue in a single, specific package, therefore providing highly accurate information. A CVE ID, on the other hand, represents the vulnerability as a whole security issue and can be associated with multiple affected packages.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;A CVE ID, on the other hand, represents the vulnerability as a whole security issue and can be associated with multiple affected packages.&lt;/p&gt;
&lt;p&gt;In rare cases, Snyk&#8217;s Security Analysts assign multiple CVE IDs to one SNYK-ID. This happens in cases where there is very high similarity or duplicates between multiple CVEs.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;Details about the change&lt;/strong&gt;:&lt;/h4&gt;
&lt;p&gt;Starting November 14th, cases with multiple CVEs and different NVD CVSS vectors will be separated into multiple advisories (multiple Snyk-IDs), one per CVE. These cases amount to less than 0.6% of Snyk&#8217;s vulnerabilities.&lt;/p&gt;
&lt;p&gt;This will provide customers with increased vulnerability granularity and ensure compatibility with NVD-provided CVSS vectors.&lt;/p&gt;
&lt;p&gt;Snyk&#8217;s hand-curated CVSS is recommended for accurate and timely analysis, while NVD CVSS is useful for compliance-based needs, like FedRAMP reports.&lt;/p&gt;
&lt;p&gt;To create a report of the vulnerabilities with the NVD CVSS Score: Click on Reports &#8594; Modify Columns &#8594; and select NVD Severity and NVD Score.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/modify_columns_nvd_severity_and_score.png" alt=""&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;h4&gt;&lt;strong&gt;Important notes&lt;/strong&gt;:&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;The number of issues you see might increase&lt;/strong&gt;. This is due to the change in issue representation to consider NVD CVSS vectors as an independent issue factor.&lt;/li&gt;
&lt;li&gt;After this change, in the rare cases in which multiple CVE IDs are associated with one SNYK-ID, the NVD CVSS vector provided will be relevant for both CVE IDs. A retest, a manual test, or a scheduled scan for monitored Projects, is needed to see the changes.&lt;/li&gt;
&lt;li&gt;Although the overall number of issues (Snyk Open Source) might increase due to the broadening of the granularity to include NVD and CVSS vectors, &lt;strong&gt;these issues can be solved with the same fix&lt;/strong&gt;.&lt;/li&gt;
&lt;li&gt;If a new advisory was created from an ignored issue, it will still appear in the Project. If not relevant, the new issue will need to be ignored as well. This is because the new advisory has a different NVD CVSS score, and Snyk cannot assume it is irrelevant to your Project.&lt;/li&gt;
&lt;li&gt;The Snyk CVSS will remain similar between the advisories.&lt;/li&gt;
&lt;li&gt;The related CVE, which the advisory was separated from, will be included in the advisory details.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source Improvements: Fixability filters</title>
			<pubDate>Mon, 06 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Improvements-Fixability-filters</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Improvements-Fixability-filters_November_6_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk has now made it easier to determine what issues have a fix available and what issues Snyk can potentially help you fix!&lt;/p&gt;
&lt;p&gt;When you're analyzing the issues in your project, in addition to our existing fixability filter, we've now introduced a new feature that allows you to identify security issues with a known fix in general, irrespective of whether we can directly assist you.&lt;/p&gt;
&lt;p&gt;This enhancement provides you with a comprehensive view of potential vulnerabilities and solutions, enabling you to make more informed decisions about your security posture while we are continously working in supporting more and more ecosystems and fixes.&lt;/p&gt;
&lt;p&gt;Try our new "Fixed In" Available filter in the Projects Dashboard and be on top of your issues! You can read more about it &lt;a href="https://docs.snyk.io/scan-using-snyk/snyk-open-source/manage-vulnerabilities/vulnerability-fix-types"&gt;here&lt;/a&gt;.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/fixed_in_filter.png" alt=""&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: Java, Kotlin, Scala</title>
			<pubDate>Fri, 03 Nov 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-Java,-Kotlin,-Scala</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-Java,-Kotlin,-Scala_November_3_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the next two weeks, we continue to enhance Snyk Code. As a result, we will be making the following improvements:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Java: Adding equality sanitizers to support equality checks. Potential decrease in all issues&lt;/li&gt;
&lt;li&gt;Java, Kotlin, Scala: Adding support for Open Redirect URL sanitizers. Potential decrease in CWE-601 issues&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: C#, PHP, Python, VB.NET</title>
			<pubDate>Tue, 31 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-C#,-PHP,-Python,-VB.NET</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-C#,-PHP,-Python,-VB.NET_October_31_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the next two weeks, we continue to enhance Snyk Code. As a result, we will be making the following improvements in the next few weeks:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;PHP: Improving sanitizers by adding support for PHP8 Type declarations. Potential decrease in issues&lt;/li&gt;
&lt;li&gt;Python: Improving sanitizers. Potential decrease in issues&lt;/li&gt;
&lt;li&gt;VB.NET: Improving coverage for customer applications. Potential increase in issues&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Customize your PRs via API</title>
			<pubDate>Mon, 30 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Customize-your-PRs-via-API</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Customize-your-PRs-via-API_October_30_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Closed beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very excited to announce our recent Closed Beta feature: the ability to &lt;a href="https://docs.snyk.io/scan-applications/snyk-open-source/open-source-basics/customize-pr-templates-closed-beta"&gt;customize settings for how your PRs look using an API.&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;Today, Snyk raises PRs using a default standard format for title, description, and commit message or branch name.&lt;/p&gt;
&lt;p&gt;However, we know that you may have your own standards and practices for the content of your PRs. We're building this feature to make it easier for you to customize the content of your PRs for your entire Group. With this API, you can set a template for your expected PR format, which Snyk will use for all PRs.&lt;/p&gt;
&lt;p&gt;Read more about the feature &lt;a href="https://docs.snyk.io/scan-applications/snyk-open-source/open-source-basics/customize-pr-templates-closed-beta"&gt;here&lt;/a&gt;. Please don't hesitate to reach out if you're interested in participating in the Closed Beta and trying out this feature early!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Rollback: Hardcoded Secrets Improvement</title>
			<pubDate>Fri, 27 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Rollback-Hardcoded-Secrets-Improvement</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Rollback-Hardcoded-Secrets-Improvement_October_27_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;On Oct 23rd, we deployed an improvement that aligned our hardcoded secrets behavior for JavaScript and Java, causing an increase in CWE-547 (Hardcoded Secrets). Unfortunately the rule change made a larger impact than intended, resulting in reports of false positives. We have decided to roll back the deployment, and this will be pushed to production on Friday, Oct 27th.&lt;/p&gt;
&lt;p&gt;Customers may have seen an increase in hardcoded secrets issues, specifically for CWE-547 in JavaScript and Java. Starting Monday, Oct 30th, the issues and any resulting false positives generated last week will be corrected.&lt;/p&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Support for SPDX in SBOM Test APIs Beta</title>
			<pubDate>Wed, 25 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Support-for-SPDX-in-SBOM-Test-APIs-Beta</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Support-for-SPDX-in-SBOM-Test-APIs-Beta_October_25_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to share that Snyk's &lt;a href="https://apidocs.snyk.io/?version=2023-10-13\~beta#post-/orgs/-org_id-/sbom_tests"&gt;SBOM Test APIs&lt;/a&gt; now support SPDX.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://spdx.dev/about/overview/"&gt;Software Package Data Exchange (SPDX)&lt;/a&gt; is part of The Linux Foundation&#174; and described as "an open standard for communicating software bill of material information, including provenance, license, security, and other related information".&lt;/p&gt;
&lt;p&gt;As a developer, you can now &lt;a href="https://docs.snyk.io/snyk-api/rest-api-endpoints-test-an-sbom-document-for-vulnerabilities"&gt;test SPDX 2.3 JSON documents for vulnerabilities&lt;/a&gt;. There is no need to specify this in your request, Snyk will automatically detect the SBOM format and test accordingly. This release adds to our existing support for CycloneDX &#8212; ensuring you can use both of the leading SBOM specifications.&lt;/p&gt;
&lt;p&gt;As always, we&#8217;re excited to hear your feedback. Please reach out if you have any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Decoupling Snyk Orb from Snyk CLI Docker Images</title>
			<pubDate>Tue, 24 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Decoupling-Snyk-Orb-from-Snyk-CLI-Docker-Images</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Decoupling-Snyk-Orb-from-Snyk-CLI-Docker-Images_October_24_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As a continued effort to help our users deliver secure code to production, we have decoupled &lt;a href="https://github.com/snyk/snyk-orb"&gt;Snyk Orb&lt;/a&gt; from the &lt;a href="https://github.com/snyk/cli/blob/66b77c1e4a8b97b4a67088fc231545ffff1e9c40/docker/README.md"&gt;deprecated&lt;/a&gt; &lt;a href="https://hub.docker.com/r/snyk/snyk-cli"&gt;Snyk CLI Docker Images&lt;/a&gt;. Please note that these are breaking changes and require additional steps after an upgrade to Snyk Orb &lt;a href="https://github.com/snyk/snyk-orb/releases/tag/v2.0.0"&gt;v2.0.0&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Your existing CircleCI setup will continue to function without interruption, as we are introducing these breaking changes following semantic release conventions. However, to benefit from future improvements to Snyk CLI, we strongly recommend that you upgrade Snyk Orb at your earliest convenience. A readme with code examples is &lt;a href="https://github.com/snyk/snyk-orb/blob/master/README.md"&gt;here&lt;/a&gt; to help you get started.&lt;/p&gt;
&lt;p&gt;Once upgraded, please make the following changes, which are breaking changes:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;remove the deprecated &lt;code&gt;scan-iac&lt;/code&gt; job, an example of how it was used in previous versions \&amp;lt;v2.0.0 is inline&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;```
description: &amp;gt;
  Use the Snyk orb inside a build job to scan a container image for known
  vulnerabilities&lt;/p&gt;
&lt;p&gt;usage:
  version: 2.1&lt;/p&gt;
&lt;p&gt;orbs:
    snyk: snyk/snyk@1.7.2&lt;/p&gt;
&lt;p&gt;workflows:
    test:
      jobs:
        - snyk/scan-iac
```&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;and, please switch to using &lt;code&gt;snyk/scan&lt;/code&gt; instead, an example is inline&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;```
description: &amp;gt;
  Use the Snyk orb inside a build job to scan a container image for known
  vulnerabilities&lt;/p&gt;
&lt;p&gt;usage:
  version: 2.1&lt;/p&gt;
&lt;p&gt;orbs:
    snyk: snyk/snyk@2.0.0&lt;/p&gt;
&lt;p&gt;workflows:
    test:
      jobs:
        - snyk/scan:
            command: iac test
```&lt;/p&gt;
&lt;p&gt;To learn more about our CI/CD integrations, our product docs are &lt;a href="https://docs.snyk.io/integrations/snyk-ci-cd-integrations"&gt;here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Decoupling Snyk Scan from Snyk CLI Docker Images</title>
			<pubDate>Tue, 24 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Decoupling-Snyk-Scan-from-Snyk-CLI-Docker-Images</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Decoupling-Snyk-Scan-from-Snyk-CLI-Docker-Images_October_24_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As a continued effort to help our users deliver secure code to production, we have decoupled &lt;a href="https://bitbucket.org/snyk/snyk-scan/src/develop/"&gt;Snyk Scan&lt;/a&gt; from the &lt;a href="https://github.com/snyk/cli/blob/66b77c1e4a8b97b4a67088fc231545ffff1e9c40/docker/README.md"&gt;deprecated&lt;/a&gt; &lt;a href="https://hub.docker.com/r/snyk/snyk-cli"&gt;Snyk CLI Docker Images&lt;/a&gt;. Please note that these are breaking changes, and require additional steps after an upgrade to Snyk Scan &lt;a href="https://bitbucket.org/snyk/snyk-scan/src/develop/CHANGELOG.md"&gt;v1.0.0&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Your existing Bitbucket setup will continue to function without interruption, as we are introducing these breaking changes following semantic release conventions. However, to benefit from future improvements to &lt;a href="https://docs.snyk.io/snyk-cli"&gt;Snyk CLI&lt;/a&gt;, we strongly recommend that you upgrade Snyk Scan at your earliest convenience. A readme with code examples is &lt;a href="https://bitbucket.org/snyk/snyk-scan/src/develop/README.md"&gt;here&lt;/a&gt; to help you get started.&lt;/p&gt;
&lt;p&gt;Once upgraded, you are required to switch from using deprecated Snyk CLI base images to &lt;a href="https://hub.docker.com/r/snyk/snyk"&gt;Snyk Images&lt;/a&gt; base images.&lt;/p&gt;
&lt;p&gt;To do so, please:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;update the &lt;code&gt;LANGUAGE&lt;/code&gt; variable to use &lt;a href="https://docs.snyk.io/integrations/snyk-ci-cd-integrations/bitbucket-pipelines-integration-overview/migrating-to-bitbucket-pipelines-v1.0.0#equivalent-snyk-images"&gt;supported tags&lt;/a&gt; from &lt;a href="https://hub.docker.com/r/snyk/snyk/tags"&gt;Snyk Images&lt;/a&gt;,&lt;/li&gt;
&lt;li&gt;or, you can follow &lt;a href="https://docs.snyk.io/integrations/snyk-ci-cd-integrations/bitbucket-pipelines-integration-overview/user-defined-custom-images"&gt;these&lt;/a&gt; instructions to build your own image.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;To learn more about our CI/CD integrations, our product docs are &lt;a href="https://docs.snyk.io/integrations/snyk-ci-cd-integrations"&gt;here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code: Python 2 Deprecation of Support</title>
			<pubDate>Thu, 19 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Python-2-Deprecation-of-Support</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Python-2-Deprecation-of-Support_October_19_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Deprecated&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Starting October 26th, Snyk Code will begin the 3 month process of deprecating Python 2 language support. Further, we plan to End of Life (EOL) on January 23, 2024, where Python 2 support will be terminated. For context, Python 2 has been unsupported by Python.org since January 2020.&lt;/p&gt;
&lt;p&gt;This means that no new development work and no new support tickets related to Python 2 will be processed. Existing Python 2 projects will continue to be scanned until EOL. After EOL, Python 2 findings will no longer appear in your results.&lt;/p&gt;
&lt;p&gt;Note that support for Python 3 will not be affected and continue as usual.&lt;/p&gt;
&lt;p&gt;If you are using Python 2, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Azure cloud environment scanning is now GA (Snyk IaC)</title>
			<pubDate>Wed, 18 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Azure-cloud-environment-scanning-is-now-GA-(Snyk-IaC)</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Azure-cloud-environment-scanning-is-now-GA-(Snyk-IaC)_October_18_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to share that scanning deployed Azure cloud environments is now GA for Snyk IaC customers on an enterprise plan. You can now secure your Azure infrastructure from code - with IaC template scanning for Azure Resource Manager(ARM) and Terraform - to the cloud.&lt;/p&gt;
&lt;p&gt;Users can now:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Onboard Azure subscriptions via API and UI, and scan and test Azure resources with our &lt;a href="https://security.snyk.io/rules/cloud/azure"&gt;security rules&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Find and fix misconfigurations identified by Snyk in the org-wide Cloud issues UI, or in the &lt;a href="https://apidocs.snyk.io/?version=2023-09-29%7Ebeta#get-/orgs/-org_id-/issues"&gt;REST API for issues&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;View an inventory of Azure resources with the &lt;a href="https://apidocs.snyk.io/?version=2023-09-29%7Ebeta#get-/orgs/-org_id-/cloud/resources"&gt;GET /cloud/resources&lt;/a&gt; endpoint&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Please see our &lt;a href="https://docs.snyk.io/integrations/cloud-platforms-integrations/azure-integration-for-cloud-configurations"&gt;User Docs&lt;/a&gt; for more details, and contact your account team with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Expanded ecosystem coverage for SBOM Test APIs</title>
			<pubDate>Tue, 17 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Expanded-ecosystem-coverage-for-SBOM-Test-APIs</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Expanded-ecosystem-coverage-for-SBOM-Test-APIs_October_17_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're thrilled to share that our SBOM Test APIs now support a wider range of Open Source languages and ecosystems! Now you can test CycloneDX SBOM documents for vulnerabilities across the following purl types: &lt;code&gt;cargo&lt;/code&gt;, &lt;code&gt;cocoapods&lt;/code&gt;, &lt;code&gt;composer&lt;/code&gt;, &lt;code&gt;gem&lt;/code&gt;, &lt;code&gt;golang&lt;/code&gt;, &lt;code&gt;hex&lt;/code&gt;, &lt;code&gt;maven&lt;/code&gt;, &lt;code&gt;npm&lt;/code&gt;, &lt;code&gt;nuget&lt;/code&gt;, &lt;code&gt;pypi&lt;/code&gt;, &lt;code&gt;swift&lt;/code&gt;, or &lt;code&gt;generic&lt;/code&gt; for unmanaged C/C++.&lt;/p&gt;
&lt;p&gt;We hope this milestone helps you adopt SBOMs within your developer workflows and expand testing coverage for a greater number of assets.&lt;/p&gt;
&lt;p&gt;Please see our &lt;a href="https://docs.snyk.io/snyk-api/rest-api-endpoints-test-an-sbom-document-for-vulnerabilities"&gt;User Docs&lt;/a&gt; for more information and reach out if you have any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>CCSS: New Severity Framework for IaC+</title>
			<pubDate>Tue, 17 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#CCSS-New-Severity-Framework-for-IaC+</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#CCSS-New-Severity-Framework-for-IaC+_October_17_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce Snyk&#8217;s move to CCSS, a severity framework, for IaC+.&lt;/p&gt;
&lt;p&gt;Prior to October 16, 2023, Snyk security researchers used an internal severity framework to determine the severity of the rules for IaC+ (new version of Snyk IaC).&lt;/p&gt;
&lt;p&gt;To provide greater accuracy, additional ways to prioritize issues, and transparency in determining the IaC+ rules severity, Snyk is moving to use the Common Configuration Scoring System (CCSS).&lt;/p&gt;
&lt;p&gt;The National Institute of Standards and Technology (NIST) developed CCSS. Also, it is derived from the Common Vulnerability Scoring System (CVSS), which was developed to measure the severity of vulnerabilities and is used today in Snyk Open Source and Snyk Container products.&lt;/p&gt;
&lt;p&gt;Please see our &lt;a href="https://docs.snyk.io/manage-risk/priorities-for-fixing-issues/severity-levels#severity-levels-and-ccss"&gt;documentation&lt;/a&gt; and explore all the new scores and severities at &lt;a href="https://security.snyk.io/rules/cloud/"&gt;https://security.snyk.io/rules/cloud/&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Native support for Apple silicon in Snyk CLI</title>
			<pubDate>Fri, 13 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Native-support-for-Apple-silicon-in-Snyk-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Native-support-for-Apple-silicon-in-Snyk-CLI_October_13_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that &#8211; going forward as of &lt;a href="https://github.com/snyk/cli/releases/tag/v1.1230.0"&gt;version 1.1230.0&lt;/a&gt; &#8211; Snyk CLI natively supports &lt;a href="https://en.wikipedia.org/wiki/Apple_silicon"&gt;Apple silicon&lt;/a&gt;. You are no longer required to manually install &lt;a href="https://support.apple.com/en-gb/HT211861"&gt;Apple&#8217;s Rosetta 2&lt;/a&gt; before installing Snyk CLI.&lt;/p&gt;
&lt;p&gt;For our Apple silicon users this means whether you are installing directly &#8211; via any of our &lt;a href="https://github.com/snyk/cli#install-snyk-cli"&gt;supported installation methods&lt;/a&gt; &#8211; or via an IDE plugin, the correct and latest Apple silicon build will be selected and installed on the system automatically.&lt;/p&gt;
&lt;p&gt;With this improvement, our Apple silicon users will be able to&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;experience a simplified Snyk CLI installation,&lt;/li&gt;
&lt;li&gt;and secure code without compromising on productivity, performance, or their compliance needs.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;To get started with Snyk CLI, or for more information, &lt;a href="https://docs.snyk.io/snyk-cli/getting-started-with-the-snyk-cli"&gt;please read the docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>The New REST Issues API is now in Beta!</title>
			<pubDate>Fri, 13 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#The-New-REST-Issues-API-is-now-in-Beta!</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#The-New-REST-Issues-API-is-now-in-Beta!_October_13_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the Beta release of the new Issues API REST endpoints, which unifies all Snyk issues (SCA, SAST, Cloud) across projects or orgs into one API call. The Unified Issues API approach offers several key benefits:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Simplifies the user experience with one paginated API call across all projects or orgs&lt;/li&gt;
&lt;li&gt;Saves time by eliminating the need to stitch data across various calls and offering a consistent schema to parse responses with&lt;/li&gt;
&lt;li&gt;Highlights our commitment to building Snyk as a holistic security platform&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The Beta version builds on the Experimental versions with the following new features:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Stable UUIDs which will not change with releases of future versions thus minimizing breaking changes going forward&lt;/li&gt;
&lt;li&gt;New Risk Score and Factors allowing for assessing risk using broader issue, application and business context&lt;/li&gt;
&lt;li&gt;Increased performance profile with faster response times&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Please check out the API docs for &lt;a href="https://apidocs.snyk.io/?version=2023-09-29%7Ebeta#get-/groups/-group_id-/issues"&gt;listing all issues by group&lt;/a&gt;, and &lt;a href="https://apidocs.snyk.io/?version=2023-09-29%7Ebeta#get-/orgs/-org_id-/issues"&gt;by org&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Rollback: PHP Interfile</title>
			<pubDate>Tue, 10 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Rollback-PHP-Interfile</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Rollback-PHP-Interfile_October_10_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Following the &lt;a href="https://status.snyk.io/incidents/lvn0gz5rqpbp"&gt;incident last Friday, October 6th&lt;/a&gt;, we&#8217;re temporarily rolling back PHP Interfile starting today as part of our mitigation strategy. For customers with PHP code, you may see a decreased number of results.&lt;/p&gt;
&lt;p&gt;We recognize the importance of PHP Interfile and are actively working towards a solution.&lt;/p&gt;
&lt;p&gt;We don&#8217;t have a confirmed timeline yet, but will provide updates once the situation stabilizes.&lt;/p&gt;
&lt;p&gt;Please reach out with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Deduplicating Targets through automatically created Project Collections</title>
			<pubDate>Tue, 10 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Deduplicating-Targets-through-automatically-created-Project-Collections</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Deduplicating-Targets-through-automatically-created-Project-Collections_October_10_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Closed beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Following the release of &lt;a href="https://updates.snyk.io/project-collections-ga-268069"&gt;Project Collections in June&lt;/a&gt;, we&#8217;re building on the story further to help improve managing your projects at scale, whilst removing some friction our users see.&lt;/p&gt;
&lt;p&gt;Users will often scan the same project through multiple methods depending on the purpose. Scanning projects from the SCM enables you to leverage features such as PR checks, while scanning projects through a CI/CD pipeline (via the CLI) will create a gating mechanism so that certain vulnerabilities do not reach critical environments. However, a Target is created for a single project for each different scan method used (the CLI and SCM), which also results in duplicate projects, and duplicate issues which can lead to inefficiencies in working within the projects area and inaccurate counts in reporting.&lt;/p&gt;
&lt;p&gt;We&#8217;re proud to announce that we&#8217;re releasing closed beta functionality which will improve efficiency when working with projects and accuracy of reporting if you scan the same project from multiple methods. When the same project is scanned from the SCM and the CLI, Snyk will automatically group those projects together within a newly created Project Collection. From this new Project Collection, you can choose which scan method&#8217;s results you want to filter out so that you work with your projects more efficiently, and you can generate more accurate reports on the filtered Collections. The Project Collection&#8217;s new issue count will be reflected in the Collection listing page, and in the reporting area too.&lt;/p&gt;
&lt;p&gt;Snyk will not merge or delete any projects or issues because knowing where in your SDLC a vulnerability was introduced has value.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Scheduled brownouts for the List All Projects v1 API endpoint</title>
			<pubDate>Mon, 09 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Scheduled-brownouts-for-the-List-All-Projects-v1-API-endpoint</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Scheduled-brownouts-for-the-List-All-Projects-v1-API-endpoint_October_9_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We recently announced a plan to &lt;a href="https://updates.snyk.io/deprecation-and-end-of-life-for-the-list-all-projects-v1-api-267781"&gt;sunset the v1 List all projects API&lt;/a&gt; (from June 22nd 2023, with an end-of-life on December 22nd 2023) in favor of the &lt;a href="https://apidocs.snyk.io/?version=2023-05-29#get-/orgs/-org_id-/projects"&gt;REST List All Projects for an org API&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Starting from October, we will be scheduling brownouts where we will be periodically removing this endpoint for a scheduled period of time. Here is the schedule:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;October 23rd for 1 hour starting at 12:00 UTC&lt;/li&gt;
&lt;li&gt;November 16th for 2 hours starting at 06:00 UTC&lt;/li&gt;
&lt;li&gt;December 6th for 4 hours starting 17:00 UTC&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;During these time windows, the API will return &lt;code&gt;410 Gone&lt;/code&gt; for all requests. If you require further support during this period, please raise a support ticket.&lt;/p&gt;
&lt;p&gt;Please refer to this &lt;a href="https://go.snyk.io/rs/677-THP-415/images/Snyk%20v1%20API%20Migration%20Guide.pdf"&gt;guide&lt;/a&gt; to move all your automations over to replacement endpoints. If you require further support during this period, please raise a support ticket.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Upcoming High Severity Vulnerability in curl and libcurl</title>
			<pubDate>Thu, 05 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Upcoming-High-Severity-Vulnerability-in-curl-and-libcurl</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Upcoming-High-Severity-Vulnerability-in-curl-and-libcurl_October_5_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;code&gt;curl&lt;/code&gt; is a popular command-line tool for transferring data using various network protocols. &lt;code&gt;curl&lt;/code&gt; is used almost ubiquitously and shipped with almost all Linux distributions.&lt;/p&gt;
&lt;p&gt;The &lt;code&gt;curl&lt;/code&gt; maintainer announced recently that on &lt;strong&gt;Oct 11, 2023&lt;/strong&gt;, at around 6:00 UTC, a new version &lt;strong&gt;8.4.0&lt;/strong&gt; of &lt;code&gt;curl&lt;/code&gt; and &lt;code&gt;libcurl&lt;/code&gt; will be released, to address a High severity vulnerability, which is assigned to &lt;a href="https://security.snyk.io/vuln/SNYK-UNMANAGED-CURL-5931782"&gt;CVE-2023-38545&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;In the maintainer&#8217;s own words:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;This is probably the worst security problem found in curl in a long time.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;Please be advised to follow updates and upgrade to the latest version once available.&lt;/p&gt;
&lt;p&gt;While not all security data is currently available, and the exact impact of this issue is still to be determined, Snyk Security Team is monitoring for updates, will update the &lt;a href="https://security.snyk.io/vuln/SNYK-UNMANAGED-CURL-5931782"&gt;curl security advisory&lt;/a&gt; accordingly, and will share more information in the following blog post: &lt;a href="https://snyk.io/blog/curl-high-severity-vulnerability-oct-2023/"&gt;High severity vulnerability found in libcurl and curl&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Additional options for Snyk SBOM CLI</title>
			<pubDate>Tue, 03 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Additional-options-for-Snyk-SBOM-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Additional-options-for-Snyk-SBOM-CLI_October_3_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to share that the Snyk SBOM CLI Extension now supports additional options for working with Maven, npm, Gradle, Python, Yarn, and NuGet projects.&lt;/p&gt;
&lt;p&gt;These will help you produce a more accurate CycloneDX or SPDX SBOM based on your project's configuration. These options are available in CLI version 1.1228.0 and beyond.&lt;/p&gt;
&lt;p&gt;Please see our &lt;a href="https://docs.snyk.io/snyk-cli/commands/sbom"&gt;User Docs&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>IaC+ (New Version of Snyk IaC) is in Early Access</title>
			<pubDate>Tue, 03 Oct 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#IaC+-(New-Version-of-Snyk-IaC)-is-in-Early-Access</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#IaC+-(New-Version-of-Snyk-IaC)-is-in-Early-Access_October_3_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;h4&gt;&lt;strong&gt;IaC+ is now in Early Access&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;IaC+ is a new version of Snyk IaC that includes:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Multi-file analysis for Terraform&#8212; support for modules and variables files&lt;/li&gt;
&lt;li&gt;Repository-based projects for SCM&#8212;capturing issues for an entire repository, instead of by singular IaC file, in alignment with Snyk Code&lt;/li&gt;
&lt;li&gt;Expanded security rule set&#8212;mapped to more than a dozen compliance standards (CIS Benchmarks, PCI DSS, SOC 2, &amp;amp; more)&lt;/li&gt;
&lt;li&gt;Cloud-to-code fixes&#8212;automatic mappings of cloud misconfigurations to the IaC source code for AWS and Terraform to expedite fixes&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;In addition to more consistent support for languages such as ARM support across all workflows (IDE, SCM, CLI, and Terraform Cloud) and custom rules in OPA&#8217;s Rego query language to enforce custom security controls across the SDLC (code to cloud).&lt;/p&gt;
&lt;p&gt;Get started with IaC+:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Turn on IaC+ via &lt;a href="https://docs.snyk.io/snyk-admin/manage-settings/snyk-preview"&gt;Snyk Preview&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Check out our &lt;a href="https://docs.snyk.io/scan-infrastructure/introduction-to-iac+"&gt;Snyk IaC documentation&lt;/a&gt; for more information&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Note: IaC+ is currently available for Enterprise plans.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Open beta availability of Git repository cloning</title>
			<pubDate>Wed, 27 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Open-beta-availability-of-Git-repository-cloning</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Open-beta-availability-of-Git-repository-cloning_September_27_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Today, Snyk is pleased to announce open beta availability of&lt;/strong&gt; &lt;a href="https://docs.snyk.io/more-info/how-snyk-handles-your-data#git-repository-cloning"&gt;&lt;strong&gt;Git repository cloning&lt;/strong&gt;&lt;/a&gt; &lt;strong&gt;&#8211; a new, and more scalable way for Snyk to provide code security and code quality improvements via&lt;/strong&gt; &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations"&gt;&lt;strong&gt;SCM integrations&lt;/strong&gt;&lt;/a&gt; &lt;strong&gt;&#8211; helping you develop fast and stay secure.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;The open beta is rolling out to all customers, and across all of Snyk&#8217;s deployments in the coming days, and will be available &#8211; via &lt;a href="https://docs.snyk.io/snyk-admin/manage-settings/snyk-preview"&gt;Snyk Preview&lt;/a&gt; &#8211; for all SCM integrations (GitHub, GitHub Enterprise, GitLab, Bitbucket Server, Bitbucket Cloud App, Bitbucket Cloud (Legacy), and Azure Repos), and SCM &#8220;flows&#8221; (&lt;a href="https://docs.snyk.io/getting-started/quickstart/import-a-project"&gt;import&lt;/a&gt;, &lt;a href="https://docs.snyk.io/scan-application-code/run-pr-checks"&gt;PR checks&lt;/a&gt;, &lt;a href="https://docs.snyk.io/getting-started/running-tests#run-tests-automatically-with-the-snyk-web-ui"&gt;recurring tests&lt;/a&gt;).&lt;/p&gt;
&lt;p&gt;When enabled by a &lt;a href="https://docs.snyk.io/snyk-admin/introduction-to-snyk-administration"&gt;Snyk Organization administrator&lt;/a&gt;, these flows will be backed by a temporary and shallow Git clone of repository contents, helping Snyk perform its security analyses &lt;a href="https://docs.snyk.io/more-info/how-snyk-handles-your-data#how-git-cloning-supports-more-reliable-results"&gt;more reliably&lt;/a&gt; and &lt;a href="https://docs.snyk.io/more-info/how-snyk-handles-your-data#how-git-cloning-supports-more-accurate-results"&gt;more accurately&lt;/a&gt;. This capability has particular benefit for customers using SCM integrations at scale, as it protects against a breach of SCM API rate- and content- limits, and improves Snyk&#8217;s analysis of very large repos (sometimes referred to as &#8220;monorepos&#8221;), by surfacing previously unreachable contents.&lt;/p&gt;
&lt;p&gt;Be on the lookout for this new capability, scheduled to land in your Snyk Organization in the coming days.&lt;/p&gt;
&lt;p&gt;Meanwhile, you can read more &lt;a href="https://docs.snyk.io/more-info/how-snyk-handles-your-data#git-repository-cloning"&gt;in the docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: Java, Javascript, .NET (C#), Ruby, Python</title>
			<pubDate>Tue, 26 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-Java,-Javascript,-.NET-(C#),-Ruby,-Python</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-Java,-Javascript,-.NET-(C#),-Ruby,-Python_September_26_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the next two weeks, we continue to enhance Snyk Code. As a result, the following improvements will be implemented:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Java: Improve support for Micronaut and adding support for "unsafe reflection" vulnerabilities. Potential increase in issues, and issues affecting CWE-470&lt;/li&gt;
&lt;li&gt;JavaScript: add support for FS/Promise Node.js APIs and sanitizer alignment. Potential increase in issues&lt;/li&gt;
&lt;li&gt;.NET (C#): Improved Type Sanitization. Potential decrease in issues&lt;/li&gt;
&lt;li&gt;Python: Improvements to sanitizers. Potential decrease in issues&lt;/li&gt;
&lt;li&gt;Ruby: Improved support for ActiveRecord. Potential increase in issues&lt;/li&gt;
&lt;li&gt;All Languages: Improvement for Path Traversal Sanitizers. Potential decrease in issues affecting CWE-22&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Expansion of Malicious Packages Coverage</title>
			<pubDate>Wed, 20 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Expansion-of-Malicious-Packages-Coverage</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Expansion-of-Malicious-Packages-Coverage_September_20_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to announce a significant expansion of the &lt;a href="https://security.snyk.io/"&gt;Snyk Vulnerability Database's&lt;/a&gt; coverage of malicious packages.&lt;/p&gt;
&lt;p&gt;Following our work to mitigate software supply chain attacks, we've added thousands of new malicious packages to the Snyk Vulnerability Database.&lt;/p&gt;
&lt;p&gt;As a result, you may notice new Critical severity issues categorized as CWE-506 during your project scans if the newly added malicious packages are detected.&lt;/p&gt;
&lt;p&gt;Malicious packages represent a rising threat in software supply chain attacks. We recommend visiting our &lt;a href="https://docs.snyk.io/manage-issues/priorities-for-fixing-issues/malicious-packages"&gt;user documentation&lt;/a&gt; to stay informed about this crucial security aspect. Here, you can learn more about what malicious packages are, how Snyk detects them, and the recommended actions to take when encountering malicious package issues in your projects.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Announcement: GA of Kotlin and VB.NET</title>
			<pubDate>Tue, 19 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-GA-of-Kotlin-and-VB.NET</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-GA-of-Kotlin-and-VB.NET_September_19_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce that on Thursday, September 28th, we will officially launch GA support for Kotlin and VB.NET, enabled for all customers. This milestone is a result of months of development, including feedback from 275 customers who conducted scans, significant enhancements driven by input received through customer calls and support tickets, the assessment of benchmark applications and open-source repositories, as well as a comprehensive review of industry and competitor research findings.&lt;/p&gt;
&lt;p&gt;For customers with Kotlin or VB.NET code, please anticipate a potential increase in issues.&lt;/p&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container - SBOM Generation CLI Support</title>
			<pubDate>Tue, 19 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-SBOM-Generation-CLI-Support</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-SBOM-Generation-CLI-Support_September_19_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to share that Snyk now supports generating CycloneDX/SPDX SBOMs for images using the Snyk Container CLI.&lt;/p&gt;
&lt;p&gt;Use the &lt;code&gt;snyk container sbom --format=&amp;lt;cyclonedx1.4+json|cyclonedx1.4+xml|spdx2.3+json&amp;gt; &amp;lt;IMAGE&amp;gt;&lt;/code&gt; command to generate SBOM for your image.&lt;/p&gt;
&lt;p&gt;This change is available in CLI version &lt;code&gt;1.1226.0&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;To learn more, check out our user &lt;a href="https://docs.snyk.io/snyk-cli/commands/sbom"&gt;documentation&lt;/a&gt;. If you have any questions or feedback, please reach out to your account team.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: C#, Java, Python</title>
			<pubDate>Fri, 15 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-C#,-Java,-Python</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-C#,-Java,-Python_September_15_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the next two weeks, we continue to enhance Snyk Code. As a result, the following improvements will be implemented:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;C#, Java, Python: aligning issue severity across languages for consistency. Customers should expect similar or fewer issues&lt;/li&gt;
&lt;li&gt;Java: improving java sanitizers. Customers should expect similar or fewer issues&lt;/li&gt;
&lt;li&gt;Java/JSP: re-enabling processing of JSP taglib directives. Customers should expect potential increase in issues (released Wed, 9/27)&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Announcement: PHP Improvements</title>
			<pubDate>Wed, 13 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-PHP-Improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-PHP-Improvements_September_13_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Code has been at the forefront of PHP static analysis since its launch 2 years ago.&lt;/p&gt;
&lt;p&gt;In 2 weeks time we will roll out a new PHP analysis engine that is smarter. From our benchmarks, we expect a similar number of matches overall, but of much higher quality. This is due to three improvements:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;The new engine is capable of deeper analysis, and so doesn&#8217;t use approximations as often. This removes many false positive matches.&lt;/li&gt;
&lt;li&gt;Object-orientated code that makes use of classes, methods and properties is analysed much better, adding new correct matches.&lt;/li&gt;
&lt;li&gt;Interfile analysis is enabled, which detects vulnerabilities across multiple source files.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please contact support or your account manager.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source: Pipenv Git support</title>
			<pubDate>Wed, 06 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Pipenv-Git-support</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Pipenv-Git-support_September_6_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very pleased to announce that Snyk Open Source now supports scanning Pipenv projects via Git integrations!&lt;/p&gt;
&lt;p&gt;With this update, you can now import your Pipenv projects into the Snyk web UI simply by &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations"&gt;connecting&lt;/a&gt; your existing Git repositories.&lt;/p&gt;
&lt;p&gt;We'll do the hard work of discovering all the dependencies and reporting all related vulnerabilities and licenses.&lt;/p&gt;
&lt;p&gt;To get started, head over to the &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/snyk-open-source-supported-languages-and-package-managers/snyk-for-python"&gt;docs&lt;/a&gt; or just re/import your repos and check out your shiny new Pipenv projects &#129303;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Announcement: GA of Swift and Scala</title>
			<pubDate>Tue, 05 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-GA-of-Swift-and-Scala</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Announcement-GA-of-Swift-and-Scala_September_5_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce that on Wednesday, September 6th, we will officially launch GA support for Swift and Scala, enabled for all customers. This milestone follows substantial improvements driven by valuable feedback from customer support tickets, calls, and improvements through benchmark applications and open-source repositories.&lt;/p&gt;
&lt;p&gt;For customers with Swift or Scala code, please anticipate a potential increase in issues.&lt;/p&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>SBOM Test APIs</title>
			<pubDate>Tue, 05 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#SBOM-Test-APIs</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#SBOM-Test-APIs_September_5_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to share that Snyk now supports testing CycloneDX SBOMs for vulnerabilities through a set of async APIs.&lt;/p&gt;
&lt;p&gt;Right now this feature is in open beta and support is limited to the npm and Maven ecosystems. Support for additional ecosystems and SPDX are coming soon.&lt;/p&gt;
&lt;p&gt;To learn more, check out the &lt;a href="https://apidocs.snyk.io/?version=2023-08-31\~beta#post-/orgs/-org_id-/sbom_tests"&gt;API docs&lt;/a&gt; and &lt;a href="https://docs.snyk.io/snyk-api/rest-api-endpoints-test-an-sbom-document-for-vulnerabilities"&gt;user docs&lt;/a&gt;. We look forward to hearing your feedback, so please don't hesitate to reach out to your account team.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Scheduled Maintenance Complete</title>
			<pubDate>Sun, 03 Sep 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Scheduled-Maintenance-Complete</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Scheduled-Maintenance-Complete_September_3_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The scheduled maintenance on Sunday, September 3rd from 14:30-15:30 UTC has been completed successfully. Snyk's US based instance is now available. More details about the maintenance can be found at &lt;a href="https://status.snyk.io/"&gt;status.snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Upcoming Scheduled Maintenance</title>
			<pubDate>Thu, 31 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Upcoming-Scheduled-Maintenance</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Upcoming-Scheduled-Maintenance_August_31_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As part of our ongoing commitments to improve the performance and stability of Snyk, we'll be performing scheduled maintenance of our systems on &lt;strong&gt;Sunday, September 3rd&lt;/strong&gt; during &lt;strong&gt;14:30-15:30 UTC&lt;/strong&gt;. You can check &lt;a href="https://status.snyk.io"&gt;status.snyk.io&lt;/a&gt; for the latest status.&lt;/p&gt;
&lt;p&gt;During this time, Snyk will be completely unavailable for all customers in the US based instance (&lt;a href="https://app.snyk.io"&gt;app.snyk.io&lt;/a&gt;) &lt;strong&gt;for up to 1 hour&lt;/strong&gt;. After the maintenance has been completed, all functionality will return and all historical data will be available. We apologize for any inconvenience this may cause.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Ensuring Compatibility: Important Update for Our JetBrains Users</title>
			<pubDate>Thu, 31 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Ensuring-Compatibility-Important-Update-for-Our-JetBrains-Users</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Ensuring-Compatibility-Important-Update-for-Our-JetBrains-Users_August_31_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Since September 2020, Snyk has provided &lt;a href="https://docs.snyk.io/integrations/ide-tools/jetbrains-plugins"&gt;plugins&lt;/a&gt; for the JetBrains family of IDEs &#8211; IntelliJ, WebStorm, Android Studio and &lt;a href="https://docs.snyk.io/integrations/ide-tools/jetbrains-plugins"&gt;more&lt;/a&gt; &#8211; so developers using these tools have Snyk&#8217;s world-class developer-first security tooling at their fingertips.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;A Commitment to Compatibility&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;As developers ourselves, we understand the significance of having a seamless and efficient coding experience, and we are committed to ensuring that our JetBrains plugins align with the latest advancements in the JetBrains ecosystem. To achieve this, we have decided to align our plugins' supported versions with &lt;a href="https://intellij-support.jetbrains.com/hc/en-us/articles/360019574859-What-versions-of-IntelliJ-based-IDEs-are-supported-"&gt;those officially supported by JetBrains&lt;/a&gt;. This alignment is crucial to maintaining stability, functionality, and performance in your coding environment.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;Supported IntelliJ Versions&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;Moving forward, our plugins will exclusively support versions of JetBrains IDEs that are also supported by JetBrains. This means that our plugins' features, updates, and optimizations will be guaranteed to work flawlessly on these officially endorsed versions. We believe that by synchronizing our efforts with JetBrains' own support roadmap, we can provide you with an unparalleled coding experience.&lt;/p&gt;
&lt;p&gt;While we strive to ensure compatibility with officially supported JetBrains versions, we understand that some of our users might continue to utilize older, unsupported versions. While our plugin might continue to function on such versions, we cannot guarantee the same level of reliability and performance as on the officially supported releases. &lt;a href="https://plugins.jetbrains.com/plugin/10972-snyk-security--code-open-source-container-iac-configurations/versions"&gt;Older versions&lt;/a&gt; of our plugin are available for download on &lt;a href="https://plugins.jetbrains.com/plugin/10972-snyk-security--code-open-source-container-iac-configurations/versions"&gt;the JetBrains Marketplace&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For the best experience with our plugins, we strongly recommend that you always use the latest version of the IDE supported by JetBrains. This approach not only ensures optimal performance but also allows you to benefit from the latest features and security enhancements provided by both JetBrains and our plugin.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;Support When You Need It&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;If you encounter any difficulties while using our JetBrains plugins, we encourage you to first ensure that you are using a supported version of the IDE. If problems persist, please don't hesitate to reach out to &lt;a href="https://support.snyk.io/hc/en-us"&gt;our dedicated support team&lt;/a&gt;. We are here to assist you and resolve any concerns you may have.&lt;/p&gt;
&lt;p&gt;Thank you for being a part of our journey towards secure coding greatness!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Changes to Dependencies tab and API</title>
			<pubDate>Tue, 29 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Changes-to-Dependencies-tab-and-API</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Changes-to-Dependencies-tab-and-API_August_29_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As part of our ongoing efforts to improve performance and reliability of Snyk, we&#8217;ve made some changes to the database infrastructure behind the &lt;a href="https://docs.snyk.io/manage-issues/dependencies-and-licenses/view-dependencies"&gt;Dependencies tab&lt;/a&gt; UI and &lt;a href="https://snyk.docs.apiary.io/#reference/dependencies/dependencies-by-organization/list-all-dependencies"&gt;v1 List all dependencies API&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;All requests will now be served by a read replica, rather than the primary database. Moving read-intensive APIs like this one dedicated database infrastructure helps ensure that our systems remain stable.&lt;/p&gt;
&lt;p&gt;When importing a Project, it's expected that changes will be reflected in the Dependencies tab and API after 10 seconds. You should not notice this change on your end, and we expect the impact on your usage of Snyk to be negligible.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: C#, Go, PHP, Java, Javascript, Scala, Kotlin, Ruby</title>
			<pubDate>Mon, 28 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-C#,-Go,-PHP,-Java,-Javascript,-Scala,-Kotlin,-Ruby</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-C#,-Go,-PHP,-Java,-Javascript,-Scala,-Kotlin,-Ruby_August_28_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Over the next two weeks, we continue to enhance Snyk Code. As a result, the following improvements will be implemented:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;PHP, Go: Improving support for hardcoded-type rules, specifically CWE-798, CWE-259, and CWE-547. Customers should expect more issues&lt;/li&gt;
&lt;li&gt;Javascript: Improving React and Nest.js support. Customers should expect more issues&lt;/li&gt;
&lt;li&gt;Java, Scala, Kotlin: Implementing support for Jooq library. Customers should expect more issues&lt;/li&gt;
&lt;li&gt;Ruby: Implementing sanitizers for ActiveRecord. Customers should expect similar or fewer issues&lt;/li&gt;
&lt;li&gt;Java, C#: Implementing regex-style sanitizers. Customers should expect similar or fewer issues&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Updates: VB.NET to Open Beta and Beta languages in Snyk Preview</title>
			<pubDate>Fri, 25 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Updates-VB.NET-to-Open-Beta-and-Beta-languages-in-Snyk-Preview</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Updates-VB.NET-to-Open-Beta-and-Beta-languages-in-Snyk-Preview_August_25_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta**, **New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;On Monday, August 28th, we&#8217;re rolling out two exciting features to enhance your Snyk Code experience.&lt;/p&gt;
&lt;p&gt;First, after months of development, thorough research, and valuable customer feedback, we're thrilled to announce that VB.NET will now be available in Open Beta.&lt;/p&gt;
&lt;p&gt;Second, we're empowering our customers to explore the potential of additional languages &#8211; VB.NET, Kotlin, Swift, and Scala &#8211; through Snyk Preview. Snyk Preview is a feature that allows you to experiment with upcoming language support and features. To access Snyk Preview, log into app.snyk.io and navigate to Settings &amp;gt; Organization Settings &amp;gt; Snyk Preview.&lt;/p&gt;
&lt;p&gt;Rest assured, these changes will not impact your existing issues. If you already use beta languages, your current settings will seamlessly carry over to Snyk Preview. For those who haven't yet opted into beta languages, Snyk Preview will have the default setting turned off. We encourage you to enable them and share your thoughts with us!&lt;/p&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container enhancements - Added support for Chainguard Images and Wolfi</title>
			<pubDate>Thu, 24 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-enhancements-Added-support-for-Chainguard-Images-and-Wolfi</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-enhancements-Added-support-for-Chainguard-Images-and-Wolfi_August_24_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that Snyk Container can now scan and identify vulnerabilities in Chainguard Images and the Wolfi (un)distribution.&lt;/p&gt;
&lt;p&gt;Scanning can be performed using the Snyk Container CLI, the Snyk Kubernetes Monitor integration, and the container registry integrations.&lt;/p&gt;
&lt;p&gt;Base image recommendations and auto detection will be available in the near future.&lt;/p&gt;
&lt;p&gt;See all distributions supported by Snyk Container &lt;a href="https://docs.snyk.io/scan-applications/snyk-container/how-snyk-container-works/supported-operating-system-distributions"&gt;here&lt;/a&gt;. If you have any questions or feedback, please contact us.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Change to Group Admin Role</title>
			<pubDate>Wed, 23 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Change-to-Group-Admin-Role</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Change-to-Group-Admin-Role_August_23_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We've made a change to how we model Group Admin's roles in terms of the Orgs within their group. Previously they would always be explicitly assigned the Org Admin role for every single Org in their Group. Now this is no longer explicit, but implied by the fact that they have the Group Admin role. There is no change in their capabilities because of this, and no action is required. The only noticeable difference will be that they no longer appear on the list of Org members. We have also made the equivalent change for Service Accounts which were assigned the Group Admin Role.&lt;/p&gt;
&lt;p&gt;Please contact support or your account representative if you have any questions or concerns.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New Risk Score for open source and container issues</title>
			<pubDate>Thu, 17 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-Risk-Score-for-open-source-and-container-issues</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-Risk-Score-for-open-source-and-container-issues_August_17_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to announce the open beta availability of Snyk&#8217;s new Risk Score!&lt;/p&gt;
&lt;p&gt;The &lt;a href="https://snyk.io/blog/introducing-new-risk-score"&gt;new Risk Score&lt;/a&gt; was designed to help you prioritize more effectively by providing you with an accurate and holistic understanding of the risk posed by a given security issue.&lt;/p&gt;
&lt;p&gt;The Risk Score is powered by a new risk assessment model that leverages multiple objective and contextual risk factors to measure both the likelihood of a vulnerability being exploited as well as the impact it may have if exploited.&lt;/p&gt;
&lt;p&gt;Examples of risk factors included in the new Risk Score: Reachability, Exploit Maturity, EPSS, Social Trends, CVSS metrics, transitive depth, business criticality, and more.&lt;/p&gt;
&lt;p&gt;Please refer to our documentation for the full list of risk factors as well as information on how the score is calculated.&lt;/p&gt;
&lt;p&gt;The new Risk Score is available, in open beta, for all Snyk users and only displayed for Snyk Open Source and Snyk Container projects. To enable the score, turn it on via Snyk Preview.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/new_risk_score.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;</description>
		</item>
		<item>
			<title>Snyk Code Improvements: Apex, PHP, Swift, Go, C#, VB.NET</title>
			<pubDate>Wed, 16 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-Apex,-PHP,-Swift,-Go,-C#,-VB.NET</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Improvements-Apex,-PHP,-Swift,-Go,-C#,-VB.NET_August_16_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;On August 29th, we're rolling out Snyk Code improvements to provide you with even better code analysis.&lt;/p&gt;
&lt;p&gt;What to expect:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;PHP: Deeper coverage, a potential increase in issues.&lt;/li&gt;
&lt;li&gt;Apex, Swift, Go, C#, VB.NET: No change in issues, possible reduction in severity (high to med/low).&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions, please reach out to your account teams.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk tools which use the List all projects v1 API now use REST APIs</title>
			<pubDate>Tue, 15 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-tools-which-use-the-List-all-projects-v1-API-now-use-REST-APIs</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-tools-which-use-the-List-all-projects-v1-API-now-use-REST-APIs_August_15_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Following the &lt;a href="https://headwayapp.co/snyk-io-updates/deprecation-and-end-of-life-for-the-list-all-projects-v1-api-267781"&gt;June announcement&lt;/a&gt; of the end-of-life of the &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;List all projects v1 API&lt;/a&gt;, we&#8217;re happy to announce that we&#8217;ve migrated the Snyk tools and integrations which use the List all projects v1 API to use the &lt;a href="https://apidocs.snyk.io/?version=2023-05-29#get-/orgs/-org_id-/projects"&gt;GA REST APIs&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;The main benefit of the new version of the tools which uses the REST APIs is that the performance will improve greatly, and you&#8217;ll see that benefit when you upgrade your tools so we strongly encourage you to do so.&lt;/p&gt;
&lt;p&gt;For a list of the tools that were using the older API and will now be using the REST APIs, check out our &lt;a href="https://go.snyk.io/rs/677-THP-415/images/Snyk%20v1%20API%20Migration%20Guide.pdf"&gt;migration guide&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Disabling certain filters being enabled by default on the Project listing page</title>
			<pubDate>Wed, 02 Aug 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Disabling-certain-filters-being-enabled-by-default-on-the-Project-listing-page</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Disabling-certain-filters-being-enabled-by-default-on-the-Project-listing-page_August_2_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that Snyk is no longer making filters on the project listing page enabled by default. We originally added this default functionality to improve the performance on the project listing page but since the improvements we&#8217;ve made and with pagination in place, we no longer need to have default functionality that might confuse users. The filters in question are the "Without Issues" and the "Deactivated Projects" filters.&lt;/p&gt;
&lt;p&gt;We are not removing the filter from the page and it will remain usable, but we are no longer enabling it by default when you create a new organization. As before, filters are part of the URL and so can be bookmarked or shared.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source now supports Reachability across all SCMs including brokered and with improved Java results</title>
			<pubDate>Wed, 19 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-now-supports-Reachability-across-all-SCMs-including-brokered-and-with-improved-Java-results</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-now-supports-Reachability-across-all-SCMs-including-brokered-and-with-improved-Java-results_July_19_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce expanded support for reachability. This includes being able to leverage reachability from Snyk regardless of which SCM being used.&lt;/p&gt;
&lt;p&gt;Previously this support existed for Github only, but now it is supported across all supported &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations"&gt;GIT repository integrations&lt;/a&gt;, including brokered environments.&lt;/p&gt;
&lt;p&gt;Additionally, we have have applied Java Reachability optimizations to increase accuracy of findings, and reach deeper level of transitives. Java support includes Maven and Gradle with lockfile.&lt;/p&gt;
&lt;p&gt;You can enable this feature feature flag as documented &lt;a href="https://docs.snyk.io/manage-issues/issue-management/reachable-vulnerabilities#enabling-reachability-for-all-scm-providers"&gt;here.&lt;/a&gt;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Cloud Scanning for IaC+ with Cloud Context is available in MT EU/AU</title>
			<pubDate>Tue, 18 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Cloud-Scanning-for-IaC+-with-Cloud-Context-is-available-in-MT-EU/AU</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Cloud-Scanning-for-IaC+-with-Cloud-Context-is-available-in-MT-EU/AU_July_18_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Excited to announce that we release our cloud scanning feature in MT EU and AU. Now, customers can onboard their AWS, Azure, and Google Cloud environment to Snyk so we can scan your cloud environment to allows bring cloud context into the misconfiguration we found in your IaC template.&lt;/p&gt;
&lt;p&gt;See the &lt;a href="https://docs.snyk.io/integrations/cloud-platforms"&gt;documentation&lt;/a&gt; for more details. If you have any question or feedback, please contact us.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Google Cloud Onboarding update with OICD Flow</title>
			<pubDate>Tue, 18 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Google-Cloud-Onboarding-update-with-OICD-Flow</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Google-Cloud-Onboarding-update-with-OICD-Flow_July_18_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are improving the Google Cloud platform onboarding flow to update the security protocol. This improvement will not impact the current onboarded Google Cloud environment. For the new onboarding, we will ask customers to provide the &lt;strong&gt;Identity provider&lt;/strong&gt; to onboard their Google Cloud environment.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/add_google_cloud_environment.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;See the &lt;a href="https://docs.snyk.io/integrations/cloud-platforms/google-cloud-integration"&gt;documentation&lt;/a&gt; for more details. If you have any question or feedback, please contact us.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container Database Maintenance</title>
			<pubDate>Mon, 17 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-Database-Maintenance</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-Database-Maintenance_July_17_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Container Database Maintenance is scheduled for Jul 25, 07:00 - 08:00 UTC.&lt;/p&gt;
&lt;p&gt;During this time, the following flows may be unavailable:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;(all deployments) monitoring container projects via the CLI, importing from Container Registry integrations. Events from Kubernetes integration auto-import/auto-delete feature may be missed&lt;/li&gt;
&lt;li&gt;(MT-EU, MT-AU and Private Cloud deployments) Dynatrace integration&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;You can subscribe to updates on this scheduled maintenance from our &lt;a href="https://status.snyk.io/incidents/w6qptt0s8jhd"&gt;status page&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Python Improvements</title>
			<pubDate>Fri, 14 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Python-Improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Python-Improvements_July_14_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Code has been at the forefront of Python static analysis since its launch in 2021.&lt;/p&gt;
&lt;p&gt;On July 27th, we will roll out a new Python analysis engine that is smarter through improved program analysis. From our benchmarks, we expect you will see approximately the same number of matches overall, with better results because we are removing False Positives and adding True Positives overall.&lt;/p&gt;
&lt;p&gt;If you have any questions, please contact support or your account manager.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Issue Summary removed from the Dashboard</title>
			<pubDate>Thu, 13 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Issue-Summary-removed-from-the-Dashboard</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Issue-Summary-removed-from-the-Dashboard_July_13_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The Snyk Dashboard is a valuable asset for users to identify their open issues and vulnerable projects. However, beginning today, issue summary data has been removed from the Snyk Dashboard because of the potential for inconsistencies with data in other locations of the product. The Projects and Reporting features continue to provide access to issue summary data, so you can look there instead of on the dashboard.&lt;/p&gt;
&lt;p&gt;We&#8217;re excited about future additions to the dashboard to make it even more relevant and integrated with your security needs. Please contact support or your account manager if you have any questions or concerns.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Insights - Risk based prioritisation</title>
			<pubDate>Wed, 12 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Insights-Risk-based-prioritisation</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Insights-Risk-based-prioritisation_July_12_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re excited to announce the open beta of Insights - a new and unique capability that is designed to help you prioritize issues posing greater risk!&lt;/p&gt;
&lt;p&gt;Insights pulls data from across the Snyk platform, building a 360 degree model of your application that includes all the components involved in producing it, together with the context of how it is deployed and used in production.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/insights_risk_based_prioritization.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;Equipped with this end-to-end application context, you gain a complete view of your application, so you can better assess the risk issues pose and weed out the noise from your backlogs. The open beta enables you to prioritize by:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Whether an issue is applicable to your operating system&lt;/li&gt;
&lt;li&gt;Whether a container is deployed or not&lt;/li&gt;
&lt;li&gt;Whether a container has a configured path to the internet&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;To find out more about Insights, technical requirements and how to set it up, please refer to the &lt;a href="https://docs.snyk.io/manage-issues/insights"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code backend migration for EU and AUS tenant customers - completed</title>
			<pubDate>Tue, 11 Jul 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-backend-migration-for-EU-and-AUS-tenant-customers-completed</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-backend-migration-for-EU-and-AUS-tenant-customers-completed_July_11_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The migration has been successful! &#127881; All customers have now been migrated to the new Snyk Code engine. This upgrade means customers in the &lt;strong&gt;app.eu.snyk.io&lt;/strong&gt; and &lt;strong&gt;app.au.snyk.io&lt;/strong&gt; tenants now benefit from the updated version of the Snyk Code engine. The underlying engine technology enables:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Improved performance and scalability:&lt;/strong&gt; We've optimized the overall performance and reliability, especially for monorepos.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Improved analysis&lt;/strong&gt;: We can now analyze even more complex code flows.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Note:&lt;/strong&gt; Customers in these tenants may see new issues identified in their scans - especially in languages like C# or Java.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have any questions or feedback, please contact us. &#128591;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Hardcoded Credentials Improvements</title>
			<pubDate>Wed, 28 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Hardcoded-Credentials-Improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Hardcoded-Credentials-Improvements_June_28_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that we have significantly improved our hard-coded secrets detection capabilities. Our latest update has greatly increased Java, Kotlin, and Scala coverage.&lt;/p&gt;
&lt;p&gt;As a result of this update, you may see an increase in the number of issues flagged by our system. Specifically, you may notice an increase in the frequency of the following CWEs:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;CWE-259: Use of Hard-coded Passwords&lt;/li&gt;
&lt;li&gt;CWE-547: Use of Hard-coded, Security-relevant Constants&lt;/li&gt;
&lt;li&gt;CWE-798: Use of Hard-coded Credentials&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;We believe these improvements will help you secure your applications better and protect your sensitive data, enabling you to develop fast and stay secure.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source Bug Fix on Cocoapod License detection</title>
			<pubDate>Wed, 28 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Bug-Fix-on-Cocoapod-License-detection</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Bug-Fix-on-Cocoapod-License-detection_June_28_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;On June 27th 2023, we resolved a bug in our Cocoapods license detection capability. This fix ensures that previously missing license information for Cocoapod subspecs is now accurately displayed.&lt;/p&gt;
&lt;p&gt;Consequently, during your scans, you may start noticing newly surfaced license issues related to Cocoapod subspecs if they violate the &lt;a href="https://docs.snyk.io/manage-issues/policies/license-policies/create-a-license-policy-and-rules"&gt;license policy&lt;/a&gt; you have set at Snyk.&lt;/p&gt;
&lt;p&gt;If you have any questions regarding this update or need assistance, please feel free to reach out to our support team.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source License Improvements</title>
			<pubDate>Wed, 28 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-License-Improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-License-Improvements_June_28_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are thrilled to announce that Snyk Open Source license detection database now includes &lt;a href="https://github.com/spdx/license-list-XML/releases/tag/v3.20"&gt;SPDX v3.20&lt;/a&gt; license types. This will result in Snyk Open Source resolving over 150 additional license types.&lt;/p&gt;
&lt;h4&gt;Value:&lt;/h4&gt;
&lt;ol&gt;
&lt;li&gt;Visibility into license types and issues against the &lt;a href="https://github.com/spdx/license-list-XML/releases/tag/v3.20"&gt;SPDX v3.20&lt;/a&gt; license list.&lt;/li&gt;
&lt;li&gt;Reduction in missing license information with Snyk.&lt;/li&gt;
&lt;/ol&gt;
&lt;h4&gt;What are the changes?&lt;/h4&gt;
&lt;ol&gt;
&lt;li&gt;The number of license detections should remain the same, but the level of detail will improve. Previously, Snyk reported these licenses as an &lt;em&gt;Unknown&lt;/em&gt; type, but after this change, the license types in the &lt;a href="https://github.com/spdx/license-list-XML/releases/tag/v3.20"&gt;SPDX v3.20&lt;/a&gt; list will be reported.&lt;/li&gt;
&lt;li&gt;The severity for the new license types added will inherit the &lt;em&gt;Unknown&lt;/em&gt; license type severity, which is Snyk&#8217;s standard practice, per the &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/licenses"&gt;user documentation&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;If you take no action you will have the same number of license detections with the same severity as you do today. The only change will be the level of detail, as Snyk will report the license name instead of &lt;em&gt;Unknown&lt;/em&gt;.&lt;/li&gt;
&lt;/ol&gt;
&lt;h4&gt;Suggested actions to take:&lt;/h4&gt;
&lt;ol&gt;
&lt;li&gt;Because this change adds the new license information, you can change the severity for these 150+ license types, providing more granular control over handling open source licenses.&lt;/li&gt;
&lt;li&gt;We suggest you review the new license types that will be included with your legal and compliance teams. You can use the &lt;a href="https://docs.snyk.io/manage-issues/policies/license-policies"&gt;license policy feature &lt;/a&gt;in Snyk to customize the severity for individual license types. The default License Policy built-in to Snyk shows an example of this.&lt;/li&gt;
&lt;li&gt;Our research team has reviewed the new license types that are coming with this implementation and has provided our perspective on them(&lt;a href="https://go.snyk.io/rs/677-THP-415/images/SPDX_Licenses_SuggestedSeverity_May31.pdf"&gt;Link to Snyk suggested severity&lt;/a&gt;). This is not legal advice; rather these are suggestions based on our own review, and we encourage you to review with your own legal and compliance experts. The suggested severities shown in this document are NOT automatically added - you will need to use the &lt;a href="https://docs.snyk.io/manage-issues/policies/license-policies"&gt;license policy feature&lt;/a&gt; to select your own severity levels. A &lt;a href="https://www.youtube.com/watch?v=y03gX_SWqzg"&gt;&lt;em&gt;How to&lt;/em&gt;&lt;/a&gt; video is here for your reference as well.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;strong&gt;Note&lt;/strong&gt;: This update applies to npm, RubyGems, Maven, Pip, Nuget, Composer and Cocoapods package managers. Go is not supported will this release.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source npm improvements</title>
			<pubDate>Tue, 27 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-npm-improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-npm-improvements_June_27_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Open source now fully supports npm &lt;code&gt;lockfile v3&lt;/code&gt; projects &#129395;&lt;/p&gt;
&lt;p&gt;With this update, you can scan your &lt;a href="https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json#lockfileversion"&gt;lockfile v3 projects&lt;/a&gt; in the Snyk CLI and import them from Git.&lt;/p&gt;
&lt;p&gt;You can also automatically fix vulnerabilities in these projects using the Snyk Open Source &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/open-source-basics"&gt;Fix PR capabilities&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;See the &lt;a href="https://docs.snyk.io/scan-application-code/supported-languages-and-frameworks/javascript"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Project Collections GA</title>
			<pubDate>Mon, 26 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Project-Collections-GA</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Project-Collections-GA_June_26_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Following the open beta of Project Collections, we&#8217;re proud to announce the general availability of Project Collections. During the beta, you could create saved Project views, share them with other members of your organization, and generate reports on them.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/project_collections.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;Here are a few of the major additions since the open beta:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;There is an API available to perform any actions for collections that are seen in the UI. For more information, please head to the &lt;a href="https://apidocs.snyk.io/?version=2023-06-19\~beta#tag--Collection"&gt;API docs&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;You can delete, deactivate, and activate Projects within the collection in bulk.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;strong&gt;Note&lt;/strong&gt;: These bulk actions can be performed on the Project listing page independently of collections&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Collections are protected by permissions now. Creating, configuring, and deleting collections require corresponding permissions. For more information on roles and permissions for Project collections, please head to the &lt;a href="https://docs.snyk.io/manage-issues/introduction-to-snyk-projects/project-collections-groupings"&gt;user docs&lt;/a&gt;.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;You can read more about Project collections and how to use them in &lt;a href="http://snyk.io/blog/mimic-your-mental-model-project-collections"&gt;this blog&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Please note that this feature is only available on enterprise plans. If you are using custom roles, you must enable the appropriate permissions assigned to your custom role to use the feature. For more information, please head to the &lt;a href="https://docs.snyk.io/snyk-admin/manage-users-and-permissions/managing-permissions"&gt;user docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Deprecation and end-of-life for the List all projects v1 API</title>
			<pubDate>Thu, 22 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Deprecation-and-end-of-life-for-the-List-all-projects-v1-API</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Deprecation-and-end-of-life-for-the-List-all-projects-v1-API_June_22_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Deprecated&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk is rolling out an initiative to migrate users from its &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;List all Projects v1 API&lt;/a&gt; to the new GA REST List all projects for an org API to help continuously improve the API experience for everyone.&lt;/p&gt;
&lt;p&gt;Based on OpenAPI specifications, Snyk&#8217;s REST API was designed to provide a more consistent, friendly, and easy-to-use API framework that introduces major improvements. The benefits of the new APIs include:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Consistent versioning&lt;/li&gt;
&lt;li&gt;Pagination and caching&lt;/li&gt;
&lt;li&gt;Improved performance&lt;/li&gt;
&lt;li&gt;Specifications for client generation&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;As part of this initiative, we are announcing the end-of-life of &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;List all Projects v1 API&lt;/a&gt; will take place on December 22nd, 2023. We are taking these necessary steps to focus on evolving Snyk&#8217;s &lt;a href="https://apidocs.snyk.io/?version=2023-05-29#get-/orgs/-org_id-/projects"&gt;REST List all projects API&lt;/a&gt;. No other V1 endpoints are affected as part of this deprecation.&lt;/p&gt;
&lt;p&gt;We have created a &lt;a href="https://go.snyk.io/rs/677-THP-415/images/Snyk%20v1%20API%20Migration%20Guide.pdf"&gt;migration guide&lt;/a&gt; enabling you to migrate from the &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;List all Projects v1 API&lt;/a&gt; to the REST APIs. The solutions we have provided in the migration guide should enable all of your existing use cases and minimize disruption.&lt;/p&gt;
&lt;p&gt;From June 22nd, 2023, we will be announcing the end-of-life of the &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;List all Projects v1 API&lt;/a&gt;. Any new customers will not be able to use the API.&lt;/p&gt;
&lt;p&gt;We have already started migrating the Snyk tools and integrations to the new REST APIs, and aim to complete this by August 15th 2023. All you need to do is upgrade the tool when prompted, as is standard practice. &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;The List all Projects v1 API&lt;/a&gt; documentation in Apiary will be removed on 22nd September 2023, but the API will still be functional.&lt;/p&gt;
&lt;p&gt;Any existing organizations and groups will have access to the API until December 22nd, 2023. On this date, we will end-of-life the &lt;a href="https://snyk.docs.apiary.io/#reference/projects/all-projects/list-all-projects"&gt;List all Projects v1 API&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;To avoid disruption, we encourage all our customers and users who rely on this API to migrate to the existing &lt;a href="https://apidocs.snyk.io/?version=2023-05-29#get-/orgs/-org_id-/projects"&gt;REST List all projects API&lt;/a&gt; before December 22nd, 2023. Failure to do so will result in broken integrations or workflow.&lt;/p&gt;
&lt;p&gt;If you have any questions or concerns, please contact support or your account manager.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code backend migration for EU and AUS tenant customers</title>
			<pubDate>Tue, 13 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-backend-migration-for-EU-and-AUS-tenant-customers</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-backend-migration-for-EU-and-AUS-tenant-customers_June_13_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;From the &lt;strong&gt;10th of July&lt;/strong&gt;, customers in the &lt;a href="https://app.eu.snyk.io"&gt;app.eu.snyk.io&lt;/a&gt; and &lt;a href="https://app.au.snyk.io"&gt;app.au.snyk.io&lt;/a&gt; tenants will benefit from the updated version of the Snyk Code engine. This update has already been released to our customers in the default tenant (&lt;a href="https://app.snyk.io"&gt;app.snyk.io&lt;/a&gt;). The underlying engine technology allows for the following:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Improved performance and scalability&lt;/strong&gt;: We have improved the overall performance and reliability of the system, especially for monorepos.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Analysis improvements:&lt;/strong&gt; We can now analyze even more complex data flows.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; You may see new issues in your scans - especially in languages like C# or Java. It is recommended to &lt;a href="https://app.tango.us/app/workflow/Steps-to-Download-Snyk-Code-Issue-Details-as-CSV-dd8dccc4f0ac4bc5bde6c9cc41449fee"&gt;take a snapshot&lt;/a&gt; of your current issues before the 10th of July to understand any differences.&lt;/p&gt;
&lt;p&gt;If you have any questions or feedback, please contact us &#128591;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Ignores for Integrated IaC/Cloud Issues</title>
			<pubDate>Mon, 12 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Ignores-for-Integrated-IaC/Cloud-Issues</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Ignores-for-Integrated-IaC/Cloud-Issues_June_12_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the Ignores feature for the Integrated IaC/Cloud Issues.&lt;/p&gt;
&lt;p&gt;This allows Snyk Integrated IaC/Cloud Issues users to ignore a single issues in the Cloud Issues UI. An ignore can be applied to the Integrated IaC and Cloud environment issues.&lt;/p&gt;
&lt;p&gt;Learn more about this feature in our latest &lt;a href="https://docs.snyk.io/scan-cloud-configurations/integrated-iac-with-cloud-context/cloud-and-integrated-iac-issues/ignoring-cloud-and-integrated-iac-issues"&gt;documentation&lt;/a&gt;.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/ignores_iac_cloud_issues.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;</description>
		</item>
		<item>
			<title>Swift Package Manager CLI support for Snyk Open Source</title>
			<pubDate>Fri, 09 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Swift-Package-Manager-CLI-support-for-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Swift-Package-Manager-CLI-support-for-Snyk-Open-Source_June_9_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are thrilled to announce that Swift Package Manager is now supported in Snyk Open Source!&lt;/p&gt;
&lt;p&gt;Using the Snyk CLI, you can now snyk test your Swift Package Manager project to get visibility of its dependencies, and vulnerabilities.&lt;/p&gt;
&lt;p&gt;Use snyk monitor to view the results in the Snyk UI. Want an SBOM? You can also now generate various standard formats using snyk sbom &#128522;&lt;/p&gt;
&lt;p&gt;See the documentation for further details, and upgrade to CLI v1.1176.0 for the new goodness &#128640;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Dark Mode for user documentation</title>
			<pubDate>Thu, 08 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Dark-Mode-for-user-documentation</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Dark-Mode-for-user-documentation_June_8_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have implemented a new Dark Mode option for the &lt;a href="https://docs.snyk.io/"&gt;user docs&lt;/a&gt;. This allows you to view docs pages in an environment that may be more compatible with your own working environment and preferences.&lt;/p&gt;
&lt;p&gt;To access Dark Mode, click the toggle next to the Search bar on the top menu from any docs page. Click the toggle again to return to the default Light Mode.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/dark_mode_user_docs.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;</description>
		</item>
		<item>
			<title>Upcoming removal of 2 Snyk Code rules</title>
			<pubDate>Thu, 08 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Upcoming-removal-of-2-Snyk-Code-rules</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Upcoming-removal-of-2-Snyk-Code-rules_June_8_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As part of our ongoing efforts to ensure we are providing valuable and actionable results for our users, we have determined that two current rules within the Snyk Code (SAST) scans are providing low value to our users and are planning to remove them from our ruleset in the near future.&lt;/p&gt;
&lt;p&gt;The two rules are: &lt;code&gt;trojansourcebidicontrol&lt;/code&gt; and &lt;code&gt;TrojanSourceConfusingUnicode&lt;/code&gt; - both of these rules were implemented at a time in which IDEs or text editors did not report on bidirectional and UTF-8 characters, mainly in cases where right-to-left languages (i.e. Arabic/Hebrew) were inserted into left-to-right languages (i.e. English) code which could have been misrepresented as source code.&lt;/p&gt;
&lt;p&gt;Today, most well known IDEs and text editors highlight this problem and provide visibility into it, hence - the decision to remove these rules to ensure we continue providing the highest value findings to our users to help them develop fast and secure.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Insights - Risk based prioritisation</title>
			<pubDate>Wed, 07 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Insights-Risk-based-prioritisation</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Insights-Risk-based-prioritisation_June_7_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re excited to announce Insights - a new and unique capability that designed by Snyk to help you prioritize issues posing greater risk!&lt;/p&gt;
&lt;p&gt;Insights pulls data from across the Snyk platform, building a 360 degree model of your application that includes all the components involved in producing it, together with the context of how it is deployed and used in production.&lt;/p&gt;
&lt;p&gt;Equipped with this end-to-end application context, you will be able to gain a complete view of your application so you can better assess the risk issues pose and weed out the noise from your backlogs.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/insights_risk_based_prioritization.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;Insights will enable you to prioritize by:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Whether an issue is applicable to your operating system&lt;/li&gt;
&lt;li&gt;Whether a container is deployed or not&lt;/li&gt;
&lt;li&gt;Whether a container has a configured path to the internet&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Insights will be available in open beta for use starting July 12th.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;To find out more about Insights, technical requirements and how to set it up, please refer to the &lt;a href="https://docs.snyk.io/manage-issues/insights"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you&#8217;re interested in being notified when Insights is available, please sign up to join the open beta &lt;a href="https://go.snyk.io/insights.html"&gt;here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Release Notes: 06.2023</title>
			<pubDate>Tue, 06 Jun 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Release-Notes-06.2023</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Release-Notes-06.2023_June_6_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Vulnerabilities and their severities were improved and aligned across languages according to the attack vector to launch the vulnerability. Three classes of attack sources were considered from most severe to least severe:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Remote Exploit: This class encompasses vulnerabilities that can be exploited by directly sending a request to a server.&lt;/li&gt;
&lt;li&gt;Indirect or Second-Order Exploits: These vulnerabilities involve planting malicious values in remote resources such as databases, often leading to indirect or second-order vulnerabilities.&lt;/li&gt;
&lt;li&gt;Fully Client-Side Exploits: This class covers vulnerabilities that rely on environment variables, command line arguments, or other client-side elements.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;As a result of our efforts, we have implemented the following changes:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Severity reductions: We have reduced the severity ratings for code and command injection vulnerabilities detected in JavaScript client-side frameworks.&lt;/li&gt;
&lt;li&gt;Python command injection: Vulnerabilities launched via command line arguments and environment variables in Python have also undergone severity reductions.&lt;/li&gt;
&lt;li&gt;Unified severity for second-order vulnerabilities: We have standardized the severity ratings for second-order vulnerabilities, including Path Traversal, XSS, Deserialization, SQLi, ReDoS, and XPath injection, across all supported Snyk Code languages. Direct server attack sources now carry higher severity ratings than indirect or local attack sources.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;If you have noticed significant changes in the severities of vulnerabilities recently, this adjustment is likely the cause. We are constantly striving to refine our assessments and ensure they accurately reflect the potential impact of vulnerabilities on your codebase.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Automatic gzip compression of CLI downloads via our CDN</title>
			<pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Automatic-gzip-compression-of-CLI-downloads-via-our-CDN</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Automatic-gzip-compression-of-CLI-downloads-via-our-CDN_May_30_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;CLI download requests from our CDN, &lt;a href="https://static.snyk.io"&gt;&lt;code&gt;static.snyk.io&lt;/code&gt;&lt;/a&gt;, are now automatically compressed using the &lt;a href="https://en.wikipedia.org/wiki/Gzip"&gt;gzip file format&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For the vast majority of our customers, this change will be entirely seamless, as this is a common HTTPS &lt;a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Encoding"&gt;content encoding&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Some customers &#8211; who are using an older version of our Eclipse and Visual Studio Code plugins &#8211; may see an error when the older plugin version attempts to update its internal CLI version.&lt;/p&gt;
&lt;p&gt;Upgrading the IDE plugin to the latest version will resolve the error.&lt;/p&gt;
&lt;p&gt;For any additional support, &lt;a href="https://support.snyk.io/hc/en-us"&gt;please get in touch&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Support for additional options added to Snyk SBOM CLI extension</title>
			<pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Support-for-additional-options-added-to-Snyk-SBOM-CLI-extension</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Support-for-additional-options-added-to-Snyk-SBOM-CLI-extension_May_30_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;This week we released support for the &lt;code&gt;--all-projects&lt;/code&gt; option in the &lt;code&gt;snyk sbom&lt;/code&gt; CLI extension. This option enables you to easily generate a single CycloneDX or SPDX software bill of materials that contains packages from all manifest files detected in your project directories.&lt;/p&gt;
&lt;p&gt;With this improvement, you can now produce an SBOM for a monorepo or other large project, even if it spans multiple languages/ecosystems. Previously, this would require generating SBOMs for each manifest file and then merging them.&lt;/p&gt;
&lt;p&gt;We've also added support for &lt;strong&gt;optional&lt;/strong&gt; flags that accompany the &lt;code&gt;--all-projects&lt;/code&gt; option: &lt;code&gt;--name&lt;/code&gt;, &lt;code&gt;--version&lt;/code&gt;, &lt;code&gt;--exclude&lt;/code&gt;, &lt;code&gt;--detection-depth&lt;/code&gt;, &lt;code&gt;--prune-repeated-subdependencies&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;To learn more, check out our &lt;a href="https://docs.snyk.io/snyk-cli/commands/sbom"&gt;user documentation&lt;/a&gt;. If you have any questions or feedback, please reach out to your account team.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code: Uncovering Hidden Security Risks in Your Python2 Code</title>
			<pubDate>Mon, 29 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Uncovering-Hidden-Security-Risks-in-Your-Python2-Code</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Uncovering-Hidden-Security-Risks-in-Your-Python2-Code_May_29_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We will deploy a new rule to detect Python2 code starting this month. As Python2 is now unsupported by the community following its sunset in 2020, we consider this as a low-severity vulnerability that will appear in your issue reporting.&lt;/p&gt;
&lt;p&gt;If you currently have Python2 code, you should expect to see an increase in low-severity vulnerabilities under CWE-1104. This can be conveniently filtered on the "Reports" tab in the web app. We highly recommend upgrading to Python3 to eliminate this vulnerability completely.&lt;/p&gt;
&lt;p&gt;If you have any questions/feedback, please contact your account teams. We&#8217;d love to hear from you.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Apex support improvement</title>
			<pubDate>Wed, 24 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Apex-support-improvement</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-Apex-support-improvement_May_24_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to announce that we will be adding support for &lt;code&gt;.trigger&lt;/code&gt; files as part of our Apex source code scanning in Snyk Code.&lt;/p&gt;
&lt;p&gt;The &lt;code&gt;.trigger&lt;/code&gt; files are used to support managing records in Salesforce, with this addition - we offer more coverage for your Apex teams, helping ensure they are able to code more securely.&lt;/p&gt;
&lt;p&gt;Once this improvement is implemented, if you have &lt;code&gt;.trigger&lt;/code&gt; files in your Apex repositories - you should expect new findings that have not been surfaced in the past.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved Go Modules scanning for Snyk Open Source</title>
			<pubDate>Wed, 17 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Improved-Go-Modules-scanning-for-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Improved-Go-Modules-scanning-for-Snyk-Open-Source_May_17_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Today we released further improvements to Go Modules SCM support for Snyk Open Source.&lt;/p&gt;
&lt;p&gt;We now have better support for selecting the effective versions according to the Golang &lt;a href="https://go.dev/ref/mod#minimal-version-selection"&gt;Minimal Version Selection&lt;/a&gt; rules.&lt;/p&gt;
&lt;p&gt;Previously, we might include multiple versions of the same package, which could lead to false positives in vulnerability reporting.&lt;/p&gt;
&lt;p&gt;After today's change, you may see a reduction in dependencies and issues for Go Module SCM Projects, as false positives are reduced.&lt;/p&gt;
&lt;p&gt;For the best possible accuracy in SCM scans for Go Modules applications, we recommend enabling &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/snyk-open-source-supported-languages-and-package-managers/snyk-for-golang#enable-full-source-code-analysis"&gt;full source code analysis&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Refreshed reporting update</title>
			<pubDate>Mon, 15 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Refreshed-reporting-update</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Refreshed-reporting-update_May_15_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;This week, Snyk&#8217;s refreshed reporting will become the default view when viewing reports in the Snyk app, providing you with easy, comprehensive, and granular security visibility across your applications! If you aren&#8217;t already familiar with these improvements, &lt;a href="https://snyk.io/blog/snyk-new-reporting-beta/"&gt;check out this blog post from the end of last year&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For more details, see our &lt;a href="https://docs.snyk.io/manage-issues/reporting"&gt;Reporting documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved .NET accuracy for Snyk Open Source</title>
			<pubDate>Thu, 11 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Improved-.NET-accuracy-for-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Improved-.NET-accuracy-for-Snyk-Open-Source_May_11_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;On May 8th we deployed an upgrade for .NET SCM imports which improves dependency analysis for projects using newer versions of .NET. In particular, transitive dependencies in .NET 6 projects should now be more accurate.&lt;/p&gt;
&lt;p&gt;As a result, you might experience a change in the dependencies and vulnerabilities reported in your .NET projects.&lt;/p&gt;
&lt;p&gt;For general information about .NET scans for SCM projects, see the &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/snyk-open-source-supported-languages-and-package-managers/snyk-for-.net#dependency-analysis"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk AI Fix - IDE Fix Suggestions</title>
			<pubDate>Thu, 11 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-AI-Fix-IDE-Fix-Suggestions</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-AI-Fix-IDE-Fix-Suggestions_May_11_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk AI Fix is now available in open beta and can be found in the Snyk Preview section!&lt;/p&gt;
&lt;p&gt;Snyk AI Fix is a purpose-built hybrid AI to fix complex code security issues in IDEs, while protecting your code ownership and integrity.&lt;/p&gt;
&lt;p&gt;Our team built Snyk AI models with topical concerns in mind:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Snyk AI models are never trained on an organization&#8217;s projects, only on open-source projects with explicit permissively open-source licensed code.&lt;/li&gt;
&lt;li&gt;Before Snyk AI presents a fix suggestion to a developer, our AI engine passes the updated code through our Snyk Code security engine to ensure that the fix solves the issue at hand and doesn&#8217;t introduce new problems.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The recent excitement and concern around AI in developer tools further validates the potential of the technology, but also the clear need to be thoughtful in the design and usage of AI in the enterprise, which aligns with the vision for our developer security platform.&lt;/p&gt;
&lt;p&gt;Note this is currently available for &lt;strong&gt;JavaScript&lt;/strong&gt;. The supported IDEs for this feature are &lt;strong&gt;VS Code&lt;/strong&gt; and &lt;strong&gt;Eclipse&lt;/strong&gt;.&lt;/p&gt;
&lt;p&gt;Learn more about Snyk AI Fix, including how to turn it on in your IDEs, in our latest &lt;a href="https://snyk.co/ufIgH"&gt;Blog Post&lt;/a&gt; and &lt;a href="https://docs.snyk.io/scan-application-code/snyk-code/fix-code-issues-automatically-with-snyk-ide-plugin-beta"&gt;Documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code - JSP Support Update</title>
			<pubDate>Wed, 10 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-JSP-Support-Update</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Code-JSP-Support-Update_May_10_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have previously announced that JSP support is available via the SCM integration and the IDE. Today it&#8217;s available via the CLI as well! This will provide a more uniform experience for users who have files of type &lt;code&gt;.jsp&lt;/code&gt; and &lt;code&gt;.jspx&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;Things to note:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;You may encounter an increase in findings in the CI workflow&lt;/li&gt;
&lt;li&gt;An increase in findings may lead to breaking the Pipeline&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>New UI for Git integration Settings and Snyk Preview</title>
			<pubDate>Thu, 04 May 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-UI-for-Git-integration-Settings-and-Snyk-Preview</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-UI-for-Git-integration-Settings-and-Snyk-Preview_May_4_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have greatly improved and modernized the UI for &lt;a href="https://docs.snyk.io/snyk-admin/manage-settings/snyk-preview"&gt;Snyk Preview&lt;/a&gt; and &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations"&gt;Git repo Integration&lt;/a&gt; settings pages, providing a faster and more helpful user experience for these areas. This is available to all customers, across all tenants and plans.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Consistent and enhanced in-context help is part of this update, with each section in each Git integration screen giving a direct More info link to helpful docs, giving you immediate access to targeted assistance.&lt;/li&gt;
&lt;li&gt;Snyk Preview has been updated in both Group and Organization views, as well as new functionality to mark an existing feature as deprecated.&lt;/li&gt;
&lt;li&gt;The Integration settings cover &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/github-integration"&gt;GitHub&lt;/a&gt;, &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/github-enterprise-integration"&gt;GitHub Enterprise&lt;/a&gt;, &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/gitlab-integration"&gt;Gitlab&lt;/a&gt;, &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/bitbucket-cloud-legacy-integration"&gt;Bitbucket Cloud legacy&lt;/a&gt;, &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/bitbucket-cloud-app-integration"&gt;Bitbucket Cloud App&lt;/a&gt;, &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/bitbucket-data-center-server-integration"&gt;Bitbucket Server&lt;/a&gt; and &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/azure-repositories-integration"&gt;Azure Repos&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/new_git_integrations_ui.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;</description>
		</item>
		<item>
			<title>Improved Go Modules scanning for Snyk Open Source</title>
			<pubDate>Fri, 28 Apr 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Improved-Go-Modules-scanning-for-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Improved-Go-Modules-scanning-for-Snyk-Open-Source_April_28_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce significant improvements for scanning Go Modules projects in Snyk Open Source &#127881;&lt;/p&gt;
&lt;p&gt;Until today, when scanning &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/snyk-open-source-supported-languages-and-package-managers/snyk-for-golang"&gt;Go Modules&lt;/a&gt; projects imported from Git, Snyk could only identify dependencies at the &lt;code&gt;module&lt;/code&gt; level. This could lead to false positives, as it might include &lt;code&gt;packages&lt;/code&gt; not used in your code.&lt;/p&gt;
&lt;p&gt;You can now &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/snyk-open-source-supported-languages-and-package-managers/snyk-for-golang#enable-full-source-code-analysis"&gt;enable full source code analysis&lt;/a&gt; for Go Modules projects imported from Git, which allows Snyk to exclude &lt;code&gt;packages&lt;/code&gt; you are not using. This provides extremely high accuracy, equivalent to that of the Snyk CLI.&lt;/p&gt;
&lt;p&gt;Once enabled, wait for the next recurring test cycle to see the improved results, or trigger a manual re-test if you can't wait &#128526;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Import API v1 scalability improvements</title>
			<pubDate>Fri, 14 Apr 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Import-API-v1-scalability-improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Import-API-v1-scalability-improvements_April_14_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce some improvements to our &lt;a href="https://snyk.docs.apiary.io/#reference/import-projects"&gt;v1 Import API&lt;/a&gt;, designed to help customers import their repos to Snyk with ease.&lt;/p&gt;
&lt;p&gt;This API is &#8211; and remains &#8211; asynchronous, meaning that requests are processed &lt;em&gt;outside&lt;/em&gt; of the HTTP request/response lifecycle. A &lt;code&gt;201 Created&lt;/code&gt; response from the API indicates that the request has been accepted and the import will be processed asynchronously via an import job, identified by a unique &lt;code&gt;jobID&lt;/code&gt;, exposed via the &lt;code&gt;Location&lt;/code&gt; response header. Details of that job can then be fetched via the separate &lt;a href="https://snyk.docs.apiary.io/#reference/import-projects/import-job/get-import-job-details"&gt;Get import job details API&lt;/a&gt;, by passing the corresponding &lt;code&gt;jobID&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;Previously, when calling the &lt;a href="https://snyk.docs.apiary.io/#reference/import-projects/import/import-targets"&gt;Import Targets API&lt;/a&gt;, the request would &lt;em&gt;only&lt;/em&gt; spawn a new import job where there was no import job already running within the organization. Where an already running import job was found, the request would be &lt;em&gt;appended&lt;/em&gt; to the already running job. Essentially, multiple import requests could yield the same import &lt;code&gt;jobID&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;This behavior had a number of unwanted side effects:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;It was hard to see the import logs for the specific import request, as multiple requests would be bundled together under the same &lt;code&gt;jobID&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Hence, it was hard to see when a specific import request had completed, or errored&lt;/li&gt;
&lt;li&gt;Additionally, a timeout of a single import job impacted multiple import requests&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;To resolve these unwanted side effects, each import request will now yield a dedicated import job and a unique &lt;code&gt;jobID&lt;/code&gt;. As before, the logs for the &lt;code&gt;jobID&lt;/code&gt; will be visible at a unique API endpoint, via &lt;a href="https://snyk.docs.apiary.io/#reference/import-projects/import-job/get-import-job-details"&gt;the Get import job details API&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;These changes will be rolling out gradually over the coming days, and are backwards compatible, meaning existing clients of the v1 Import API, including &lt;a href="https://github.com/snyk-tech-services/snyk-api-import"&gt;the Snyk API import tool&lt;/a&gt;, will continue to work without interruption.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved Snyk Code engine</title>
			<pubDate>Wed, 12 Apr 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Improved-Snyk-Code-engine</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Improved-Snyk-Code-engine_April_12_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Starting next week and through the end of April, we will be deploying an updated version of the Snyk Code engine. This update is meant to improve our scalability/performance, enable deeper interfile analysis and improve debuggability from our side. Some details on what to expect and the updates that we&#8217;re making:&lt;/p&gt;
&lt;p&gt;Deeper interfile scanning: Snyk Code is able to trace dataflow in between files and therefore find issues that other popular tools don&#8217;t. We are able to increase the depth of these interfile analysis beyond two files and surface complex vulnerabilities that span across multiple files. Note: that you may see new issues found in your scans - especially in languages like C# or Java that makes use of deep connected chains of files.&lt;/p&gt;
&lt;p&gt;Performance and Scalability: We&#8217;ve improved the overall performance/reliability of the system especially in the case of mono-repos.&lt;/p&gt;
&lt;p&gt;If you have any questions/feedback, Please reach out to your account teams. We&#8217;d love to hear from you.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New reporting update</title>
			<pubDate>Mon, 10 Apr 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-reporting-update</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-reporting-update_April_10_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;In a few weeks, Snyk will update the grouping of issues in our new reports to better align with the way issues are grouped in the Snyk projects pages and the API. This will allow customers to focus on the prioritization and remediation of issues with improved consistency across the platform.&lt;/p&gt;
&lt;p&gt;Customers using Snyk Open Source and Container will see fewer issues in reporting after the change, as the paths by which an issue is introduced will no longer be counted separately. Please reach out to your account team with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Import and scan Poetry projects from Git</title>
			<pubDate>Wed, 05 Apr 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Import-and-scan-Poetry-projects-from-Git</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Import-and-scan-Poetry-projects-from-Git_April_5_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that Snyk Open Source now supports scanning &lt;a href="https://python-poetry.org/"&gt;Poetry&lt;/a&gt; projects via our Git integrations &#127881;&lt;/p&gt;
&lt;p&gt;When importing Git repositories, we will detect Poetry projects if they contain &lt;code&gt;pyproject.toml&lt;/code&gt; and &lt;code&gt;poetry.lock&lt;/code&gt; files.&lt;/p&gt;
&lt;p&gt;Poetry scanning is also available in the Snyk CLI and IDE extensions.&lt;/p&gt;
&lt;p&gt;For more details, see the &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/snyk-open-source-supported-languages-and-package-managers/snyk-for-python#git-services-for-poetry-projects"&gt;Snyk for Python&lt;/a&gt; documentation &#128035;&lt;/p&gt;</description>
		</item>
		<item>
			<title>The official Snyk Terraform Provider is in open beta</title>
			<pubDate>Tue, 04 Apr 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#The-official-Snyk-Terraform-Provider-is-in-open-beta</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#The-official-Snyk-Terraform-Provider-is-in-open-beta_April_4_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the official Snyk Terraform Provider.&lt;/p&gt;
&lt;p&gt;The first use case that our Snyk Terraform Provider cover is allowing you to onboard your cloud environments (in AWS, Azure, GCP), where you manage the Infrastructure via Terraform.&lt;/p&gt;
&lt;p&gt;Please follow this link to install the &lt;a href="https://registry.terraform.io/providers/snyk-terraform-assets/snyk/latest"&gt;terraform provider&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New Learning Guides for your tech stack</title>
			<pubDate>Thu, 23 Mar 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-Learning-Guides-for-your-tech-stack</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-Learning-Guides-for-your-tech-stack_March_23_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Following on from &lt;a href="https://headwayapp.co/snyk-io-updates/new-guides-258711"&gt;our earlier post&lt;/a&gt;, I'm happy to say we've introduced additional new tech-stack specific &lt;a href="https://docs.snyk.io/guides"&gt;Learning Guides&lt;/a&gt;:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/snyk-for-.net-developers"&gt;Snyk for .NET developers&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/snyk-for-java-developers"&gt;Snyk for Java Developers&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/snyk-for-javascript-node.js-developers"&gt;Snyk for JavaScript / Node.js developers&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;These guides help you implement Snyk on your specific technology stack, providing step-by-step advice and good practices on these areas.&lt;/p&gt;
&lt;p&gt;We will continue to publish additional Learning Guides as a resource to help you smoothly implement your Snyk solution, combined with &lt;a href="https://docs.snyk.io/"&gt;Snyk Docs&lt;/a&gt;, &lt;a href="https://training.snyk.io/"&gt;Snyk Training&lt;/a&gt; and &lt;a href="https://learn.snyk.io/"&gt;Snyk Learn&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Project Collections open beta</title>
			<pubDate>Tue, 21 Mar 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Project-Collections-open-beta</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Project-Collections-open-beta_March_21_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the Snyk Preview of Project Collections open beta.&lt;/p&gt;
&lt;p&gt;Project collections help you collect and organize your Projects so you can easily view and perform actions on. A Project collection can consist of multiple project types from different targets.&lt;/p&gt;
&lt;p&gt;You can opt your organization in to the new experience via Settings &amp;gt; Snyk Preview &amp;gt; Project Collections &amp;gt; &#9989; Enabled &amp;gt; Save.&lt;/p&gt;
&lt;p&gt;For more information about Project Collections, check out the &lt;a href="https://docs.snyk.io/manage-issues/introduction-to-snyk-projects/project-collections-beta"&gt;docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New import logs UI</title>
			<pubDate>Mon, 20 Mar 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-import-logs-UI</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-import-logs-UI_March_20_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce the redesigned import logs UI is now available for all users.&lt;/p&gt;
&lt;p&gt;This redesign introduces a page loading state, and makes it easier to navigate log messages via groupings and nested pagination controls.&lt;/p&gt;
&lt;p&gt;You also have the flexibility to opt out and continue using the old UI experience via the banner shown on the import page.&lt;/p&gt;
&lt;p&gt;Read more about importing Projects to Snyk in our &lt;a href="https://docs.snyk.io/getting-started/quickstart/import-a-project#import-results"&gt;docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New permission for Project History</title>
			<pubDate>Tue, 14 Mar 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-permission-for-Project-History</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-permission-for-Project-History_March_14_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The ability to view project history was incorporated within the ability to view a Project. However, to improve an organization&#8217;s security and access to the issue and dependency information, we are making &lt;code&gt;View Project&lt;/code&gt; permission more granular by adding a new permission, &lt;code&gt;View Project History&lt;/code&gt;. This will allow you to have more granular control of access to Project history.&lt;/p&gt;
&lt;p&gt;We will be rolling out the change from &lt;strong&gt;March 16th&lt;/strong&gt;, and all standard and existing custom roles will automatically have this new permission incorporated. There will be no disruption to the user experience. You will be greeted with a message to inform you that they have insufficient permissions if you attempt to view any snapshot data without your role having the permission.&lt;/p&gt;
&lt;p&gt;If you have a custom role and you do unexpectedly encounter this issue, the solution is to apply the new permission, &lt;code&gt;View Project History&lt;/code&gt; to the role if deemed required.&lt;/p&gt;
&lt;p&gt;For more information, please read the &lt;a href="https://docs.snyk.io/snyk-admin/managing-users-and-permissions/member-roles#edit-a-role"&gt;member roles documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Preview: New import logs UI</title>
			<pubDate>Fri, 10 Mar 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Preview-New-import-logs-UI</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Preview-New-import-logs-UI_March_10_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce a &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-settings/snyk-preview"&gt;&lt;em&gt;Snyk Preview&lt;/em&gt;&lt;/a&gt; of our redesigned import logs UI.&lt;/p&gt;
&lt;p&gt;This redesign introduces a page loading state, and makes it easier to navigate log messages via groupings and nested pagination controls.&lt;/p&gt;
&lt;p&gt;You can opt your organization in to the new experience via Settings &amp;gt; Snyk Preview &amp;gt; New import log UI &amp;gt; &#9989; Enabled &amp;gt; Save.&lt;/p&gt;
&lt;p&gt;Read more about importing Projects to Snyk &lt;a href="https://docs.snyk.io/getting-started/quickstart/import-a-project#import-results"&gt;in our docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Rocky Linux support</title>
			<pubDate>Thu, 02 Mar 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Rocky-Linux-support</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Rocky-Linux-support_March_2_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that &lt;a href="https://rockylinux.org/"&gt;Rocky Linux&lt;/a&gt; versions 8 and 9 are now fully supported in Snyk Container &#127881;&lt;/p&gt;
&lt;p&gt;Rocky Linux is an open-source enterprise operating system designed to be compatible with Red Hat Enterprise Linux&#174;.&lt;/p&gt;
&lt;p&gt;With this update you can run tests, monitor your Rocky Linux images, and get &lt;a href="https://docs.snyk.io/scan-containers/getting-around-the-snyk-container-ui/base-image-detection#base-image-recommendations"&gt;base image recommendations&lt;/a&gt; on the most secure versions.&lt;/p&gt;
&lt;p&gt;For a full list of supported operating systems, see the &lt;a href="https://docs.snyk.io/scan-containers/supported-operating-system-distributions"&gt;Snyk Container documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>API authentication vulnerability found in Snyk Kubernetes integration</title>
			<pubDate>Tue, 28 Feb 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#API-authentication-vulnerability-found-in-Snyk-Kubernetes-integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#API-authentication-vulnerability-found-in-Snyk-Kubernetes-integration_February_28_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;If you are a Snyk Container user on the &lt;a href="https://docs.snyk.io/more-info/plans"&gt;Snyk Enterprise plan&lt;/a&gt; that currently uses our Kubernetes Integration we want to inform you about a Medium severity vulnerability (&lt;a href="https://www.cve.org/CVERecord?id=CVE-2023-1065"&gt;CVE-2023-1065&lt;/a&gt;).&lt;/p&gt;
&lt;p&gt;To mitigate this vulnerability please perform an upgrade to the following version v2.0.0. To learn more on how to do this, please refer to our &lt;a href="https://docs.snyk.io/scan-containers/kubernetes-workload-and-image-scanning/kubernetes-integration-overview"&gt;documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Further information about the vulnerability can be found in this &lt;a href="https://snyk.io/blog/api-auth-vuln-snyk-kubernetes-cve-2023-1065/"&gt;blog post&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New Guides</title>
			<pubDate>Mon, 27 Feb 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-Guides</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-Guides_February_27_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;I&#8217;m happy to announce that we now have published our first set of learning-oriented &lt;a href="https://docs.snyk.io/guides"&gt;Guides&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;These guides aim to help initiators get started with the Snyk product and successfully adopt Snyk, providing readers with step-by-step advice and good practices on a range of key user journey areas.&lt;/p&gt;
&lt;p&gt;The new Guides are:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/getting-started-with-snyk-free-team-plan"&gt;Getting started with Snyk: Free / Team plan&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/preparing-for-implementation-free-team-plan"&gt;Preparing for implementation: Free / Team plan&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/getting-started-with-snyk-enterprise-plan"&gt;Getting started with Snyk: Enterprise plan&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/preparing-for-implementation-enterprise-plan"&gt;Preparing for implementation: Enterprise plan&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/guides/snyk-for-javascript-node.js-developers"&gt;Snyk for JavaScript / Node.js developers&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;We&#8217;ll publish additional Guides over the next few weeks, with topics including migrations and further detailed tech stack implementation guidance.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Users can now set Project Test Frequency via API</title>
			<pubDate>Wed, 22 Feb 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Users-can-now-set-Project-Test-Frequency-via-API</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Users-can-now-set-Project-Test-Frequency-via-API_February_22_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Every day, Snyk tests users&#8217; projects for new vulnerabilities or for keeping up to date with changes. Each project has its set Test Frequency - the cadence in which that project is to be tested for vulnerabilities.&lt;/p&gt;
&lt;p&gt;Setting to test frequency is easily done via the Project page in the Snyk UI today. Now a new REST/v3 endpoint under the Projects API allows users to update Test Frequency to a project using a simple string parameter - test_frequency.&lt;/p&gt;
&lt;p&gt;To review the API Docs, please visit &lt;a href="https://apidocs.snyk.io/?version=2023-02-15#patch-/orgs/-org_id-/projects/-project_id-"&gt;v3 API Docs: Project update&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Deprecation of Serverless and Platform as a Service integrations</title>
			<pubDate>Mon, 20 Feb 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Deprecation-of-Serverless-and-Platform-as-a-Service-integrations</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Deprecation-of-Serverless-and-Platform-as-a-Service-integrations_February_20_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Deprecated&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk &lt;a href="https://docs.snyk.io/integrations"&gt;integrates&lt;/a&gt; with many popular developer tools, languages, clouds, and other services, providing developer-first security workflows and fixes across the entire SDLC.&lt;/p&gt;
&lt;p&gt;Today we are announcing the end-of-life of a handful of these integrations, specifically:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;AWS Lambda&lt;/li&gt;
&lt;li&gt;Azure Functions&lt;/li&gt;
&lt;li&gt;Cloud Foundry&lt;/li&gt;
&lt;li&gt;Heroku&lt;/li&gt;
&lt;li&gt;Pivotal&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;We are taking these necessary steps in order to focus our efforts on our customers&#8217; greatest needs, and will continue to provide integrations via popular Git (SCM) repositories, IDEs, CI/CD services, registries, third-party clouds, and more. Additionally, Snyk is committed to being API-first by default, in order to facilitate a growing number of third-party integrations.&lt;/p&gt;
&lt;p&gt;These integrations have been frozen starting &lt;strong&gt;March 20th, 2023&lt;/strong&gt;, and is no longer be possible to configure &lt;em&gt;&lt;strong&gt;new&lt;/strong&gt;&lt;/em&gt; instances of these integrations.&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;Previously&lt;/strong&gt;&lt;/em&gt; configured instances will continue to operate until &lt;strong&gt;August 20th, 2023&lt;/strong&gt;. After this date projects imported via these integrations will no longer be available, and the configurations will be removed.&lt;/p&gt;
&lt;p&gt;To avoid disruption, we encourage all our customers and users who rely on these integrations to integrate the source code for their deployments via &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations"&gt;an SCM integration&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://support.snyk.io/hc/en-us"&gt;Reach out to support&lt;/a&gt; with any questions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source - Yarn 2 &amp; 3 support</title>
			<pubDate>Tue, 07 Feb 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Yarn-2-&amp;-3-support</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Open-Source-Yarn-2-&amp;-3-support_February_7_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that Yarn 2 and Yarn 3 are now fully supported in Snyk Open Source &#127881;&lt;/p&gt;
&lt;p&gt;With this update you can run test and monitor your Yarn 2 and 3 projects in the &lt;a href="https://docs.snyk.io/snyk-cli/getting-started-with-the-cli"&gt;Snyk CLI&lt;/a&gt; (v1.1073 and above), import them using our &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations"&gt;Git integrations&lt;/a&gt;, create pull/merge requests to &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/open-source-basics"&gt;fix vulnerabilities&lt;/a&gt;, test using the &lt;a href="https://snyk.docs.apiary.io/#reference/test/yarn/test-package.json-&amp;amp;-yarn.lock-file"&gt;Snyk API&lt;/a&gt;, and more.&lt;/p&gt;
&lt;p&gt;For full details see the &lt;a href="https://docs.snyk.io/scan-application-code/snyk-open-source/language-and-package-manager-support/snyk-for-javascript/snyk-for-yarn"&gt;Snyk Open Source for Yarn documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New user docs structure</title>
			<pubDate>Tue, 24 Jan 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-user-docs-structure</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-user-docs-structure_January_24_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have updated the navigation and structure of the Snyk user docs, to make it simpler, easier to understand, and to match the Snyk user experience.&lt;/p&gt;
&lt;p&gt;For example, we moved the product docs (Snyk Code, Snyk Cloud, and so on) under task-based sections (&lt;a href="https://docs.snyk.io/scan-application-code"&gt;Scan application code&lt;/a&gt;, &lt;a href="https://docs.snyk.io/scan-containers"&gt;Scan containers&lt;/a&gt; and &lt;a href="https://docs.snyk.io/scan-cloud-deployment"&gt;Scan cloud deployment&lt;/a&gt;) to give greater alignment between Snyk products and the functions of these products.&lt;/p&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/new_user_docs_structure.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;p&gt;We will continue to work on these areas, to ensure that our docs match the requirements and actions of our user base.&lt;/p&gt;
&lt;p&gt;See &lt;a href="https://docs.snyk.io/"&gt;Snyk user documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New project listing page design and functionality!</title>
			<pubDate>Mon, 23 Jan 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#New-project-listing-page-design-and-functionality!</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#New-project-listing-page-design-and-functionality!_January_23_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;ve started to roll out a new design and feature enhancements for the project listing page! The design provides a cleaner and more consistent experience across the platform. The functionality improvements help you navigate and use the project listing page more efficiently.&lt;/p&gt;
&lt;p&gt;Note: This is a gradual rollout that will first affect those users already using the new Snyk UI with a wider global rollout to follow soon.&lt;/p&gt;
&lt;p&gt;So what can you expect?&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Improved filtering insight, app context, and project identification: the new design accommodates project collections while aligning with how users navigate their projects&lt;/li&gt;
&lt;li&gt;Clearly identifiable filters allow users to get to their projects quicker whilst retaining the context they&#8217;re working in&lt;/li&gt;
&lt;li&gt;Page header and breadcrumbs let users know where they are in the app&lt;/li&gt;
&lt;li&gt;Searchable and sortable projects list improves the scannable nature of the page&lt;/li&gt;
&lt;/ul&gt;
&lt;figure&gt;&lt;img src="https://github.com/snyk/product-updates-docs/gitbook/assets/new_project_list_page_ui.png" alt="" width="375"&gt;&lt;figcaption&gt;&lt;/figcaption&gt;&lt;/figure&gt;

&lt;ul&gt;
&lt;li&gt;Share and bookmark filtered versions of the page: After users have applied filters in the project listing page, they can bookmark the link and share it with other users within their organization&lt;/li&gt;
&lt;li&gt;Exclusion of folders when importing a project: folders can be excluded when importing a project through the UI (SCA and Container only)&lt;/li&gt;
&lt;li&gt;Enhanced deletion: Targets, including their projects, can be deleted now&lt;/li&gt;
&lt;li&gt;Easier re-import: Users can retry the import of a target should anything derail it&lt;/li&gt;
&lt;li&gt;Sort by test recency: Projects inside a target can be sorted by name and latest test to find what is needed faster&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;For more information, head to the &lt;a href="https://docs.snyk.io/manage-issues/introduction-to-snyk-projects"&gt;project documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container - Application dependencies CLI scan by default - Reminder</title>
			<pubDate>Tue, 17 Jan 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-Application-dependencies-CLI-scan-by-default-Reminder</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Snyk-Container-Application-dependencies-CLI-scan-by-default-Reminder_January_17_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to share that starting from January 24th, 2023, when using the snyk container test/monitor CLI commands, we will scan for &lt;a href="https://docs.snyk.io/products/snyk-container/getting-around-the-snyk-container-ui/detecting-application-vulnerabilities-in-container-images"&gt;application dependencies&lt;/a&gt; by default, which will allow you to get a full picture of the security issues within your images.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://snyk.io/blog/securing-container-applications-using-the-snyk-cli/"&gt;Here&lt;/a&gt; are all the details you need to know about this change to ensure your testing and automation work as expected and you understand all your options.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Re-issuing GPG keys and signing certificates for Snyk CLI</title>
			<pubDate>Wed, 11 Jan 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2023#Re-issuing-GPG-keys-and-signing-certificates-for-Snyk-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2023#Re-issuing-GPG-keys-and-signing-certificates-for-Snyk-CLI_January_11_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;For every Snyk CLI release, we publish signed binaries for Windows and macOS, and GPG signed SHA-256 checksums for all artifacts.&lt;/p&gt;
&lt;p&gt;These important measures ensure the authenticity and integrity of the Snyk CLI prior to use.&lt;/p&gt;
&lt;p&gt;Following &lt;a href="https://circleci.com/blog/january-4-2023-security-alert/"&gt;a recent incident&lt;/a&gt; impacting our CI/CD vendor, we have rotated our GPG keys and are re-issuing our Windows and macOS signing certificates for Snyk CLI. Going forward, every Snyk CLI release will be signed with these new certificates, which replace the previous ones used.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;No malicious activity or leak is believed to have occurred, we are taking these steps out of an abundance of caution and concern for our customers&#8217; safety.&lt;/strong&gt;&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What do I need to do?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;Our new GPG keys should be used for verifying checksums from &lt;a href="https://github.com/snyk/cli/releases/tag/v1.1082.0"&gt;CLI release 1.1082.0&lt;/a&gt; onwards.&lt;/p&gt;
&lt;p&gt;If you have previously imported our public GPG key, please delete and re-import, via:&lt;/p&gt;
&lt;p&gt;```shell
gpg --delete-keys 68BFBCCEB7794E6FC06A2044A29C32E91F4B9569&lt;/p&gt;
&lt;p&gt;gpg --keyserver hkps://keys.openpgp.org --recv-keys A22665FB96CAB0E0973604C83676C4B8289C296E
```&lt;/p&gt;
&lt;p&gt;Otherwise, no action is necessary.&lt;/p&gt;
&lt;p&gt;For more information, see &lt;a href="https://docs.snyk.io/snyk-cli/getting-started-with-the-cli"&gt;getting started with the CLI&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Compliance reporting and Issue triage for Snyk Cloud and Snyk IaC</title>
			<pubDate>Thu, 29 Dec 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Compliance-reporting-and-Issue-triage-for-Snyk-Cloud-and-Snyk-IaC</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Compliance-reporting-and-Issue-triage-for-Snyk-Cloud-and-Snyk-IaC_December_29_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re excited to share that Snyk Cloud and Snyk IaC (&lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/integrated-infrastructure-as-code"&gt;integrated&lt;/a&gt;) now support compliance reporting and issue triage for &lt;a href="https://docs.snyk.io/products/snyk-cloud/cloud-compliance#supported-compliance-standards"&gt;10+ compliance standards&lt;/a&gt; - including CIS Benchmarks for AWS and Google Cloud, PCI DSS and SOC 2.&lt;/p&gt;
&lt;p&gt;We&#8217;ve added a &lt;strong&gt;Cloud Compliance Issues report&lt;/strong&gt; to the &lt;a href="https://docs.snyk.io/features/snyk-reports/reporting-beta-2022/available-snyk-reports"&gt;reporting beta&lt;/a&gt; that enables users to select a compliance standard, and view compliance controls and corresponding Issue counts. To fix these issues, the report links directly to the &lt;a href="https://docs.snyk.io/products/snyk-cloud/snyk-cloud-issues/view-cloud-issues-in-the-snyk-web-ui"&gt;Cloud Issues UI&lt;/a&gt;, with appropriate filters set for faster investigation and remediation.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; All users with access to the reporting beta will see the Cloud Compliance Issues report, with an appropriate message if you do not have Snyk Cloud and/or integrated IaC enabled. Please reach out to your account team for questions about access.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source - Unmanaged C/C++ scanning support in IDEs</title>
			<pubDate>Thu, 22 Dec 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Open-Source-Unmanaged-C/C++-scanning-support-in-IDEs</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Open-Source-Unmanaged-C/C++-scanning-support-in-IDEs_December_22_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that we have added &lt;a href="https://docs.snyk.io/products/snyk-open-source/language-and-package-manager-support/snyk-for-c-c++"&gt;unmanaged C/C++ scanning&lt;/a&gt; support in the Snyk Open Source product for the following IDEs - JetBrains, Visual Studio and Visual Studio Code. You can follow instructions on how to use it via the following documentation.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/ide-tools/jetbrains-plugins/configuration-for-the-jetbrains-plugins"&gt;Unmanaged scanning in JetBrains&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/ide-tools/visual-studio-extension/visual-studio-extension-configuration"&gt;Unmanaged scanning in Visual Studio&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/ide-tools/visual-studio-code-extension/visual-studio-code-extension-configuration"&gt;Unmanaged scanning in Visual Studio Code&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;This is available to all users, free or paid!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container - Application dependencies CLI scan by default</title>
			<pubDate>Wed, 14 Dec 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-Application-dependencies-CLI-scan-by-default</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-Application-dependencies-CLI-scan-by-default_December_14_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to share that starting from January 24th, 2023, when using the &lt;code&gt;snyk container test/monitor&lt;/code&gt; CLI commands, we will scan for &lt;a href="https://docs.snyk.io/products/snyk-container/getting-around-the-snyk-container-ui/detecting-application-vulnerabilities-in-container-images"&gt;application dependencies&lt;/a&gt; by default, which will allow you to get a full picture of the security issues within your images.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://snyk.io/blog/securing-container-applications-using-the-snyk-cli/"&gt;Here&lt;/a&gt; are all the details you need to know about this change to ensure your testing and automation work as expected and you understand all your options.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk for Visual Studio Code extension now scans your IaC files</title>
			<pubDate>Mon, 12 Dec 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-for-Visual-Studio-Code-extension-now-scans-your-IaC-files</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-for-Visual-Studio-Code-extension-now-scans-your-IaC-files_December_12_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can check for misconfigurations within your Visual Studio Code (VS Code) IDE powered by the Snyk IaC policy engine.&lt;/p&gt;
&lt;p&gt;To install the extension search for &#8216;Snyk&#8217; in the VSCode Marketplace. If you already have the Snyk VS Code extension, just update it from the Extensions tab of your IDE.&lt;/p&gt;
&lt;p&gt;This feature is available to all users, free or paid!&lt;/p&gt;
&lt;p&gt;View the &lt;a href="https://docs.snyk.io/ide-tools/visual-studio-code-extension/visual-studio-code-extension-analysis-results-snyk-iac-configuration"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk is now also available in Asia-Pacific (Sydney)!</title>
			<pubDate>Tue, 29 Nov 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-is-now-also-available-in-Asia-Pacific-(Sydney)!</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-is-now-also-available-in-Asia-Pacific-(Sydney)!_November_29_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce that Snyk is now also available in Asia-Pacific (Sydney), enabling Snyk customers to comply with local data residency requirements.&lt;/p&gt;
&lt;p&gt;This new deployment option is currently available for new Snyk customers only. Migration from other regions and Snyk&#8217;s other deployment options will be supported in the future.&lt;/p&gt;
&lt;p&gt;For more information on this announcement, please refer to our &lt;a href="https://snyk.io/blog/accouncement-new-datacenter-aus"&gt;blog&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Container Registry Agent adding HTTPS configuration</title>
			<pubDate>Tue, 29 Nov 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Container-Registry-Agent-adding-HTTPS-configuration</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Container-Registry-Agent-adding-HTTPS-configuration_November_29_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the improvement of our Container Registry Agent (CRA). Previously CRA could only be configured to run an HTTP server. Now, The Container Registry Agent runs an HTTP server by default. Additionally, it is configurable to run an HTTPS server for local connections.&lt;/p&gt;
&lt;p&gt;This new improvement allows the broker image and CRA to communicate in HTTPS. Please download the latest CRA image in &lt;a href="https://hub.docker.com/r/snyk/container-registry-agent"&gt;Docker Hub&lt;/a&gt; and follow the configuration instruction in &lt;a href="https://docs.snyk.io/features/snyk-broker/snyk-broker-container-registry-agent/container-registry-agent-advanced-configuration#container-registry-agent-server-https-configuration"&gt;Snyk Public Docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved Fingerprinting for Snyk Code</title>
			<pubDate>Thu, 17 Nov 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-Fingerprinting-for-Snyk-Code</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-Fingerprinting-for-Snyk-Code_November_17_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce improvements with the way fingerprinting is done in &lt;a href="https://docs.snyk.io/products/snyk-code"&gt;Snyk Code&lt;/a&gt;!&lt;/p&gt;
&lt;p&gt;A fingerprinting algorithm is a procedure that maps an arbitrarily large data item to a much shorter bit string, its fingerprint, that uniquely identifies the original data for all practical purposes.&lt;/p&gt;
&lt;p&gt;With our &lt;a href="https://snyk.io/blog/snyk-new-reporting-beta/"&gt;reporting functionality recently in Open Beta&lt;/a&gt;, the new fingerprinting will make the experience of viewing and retrieving issues data even easier and smoother.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Note&lt;/strong&gt;, due to this, in the Code Reporting, you may see large numbers of both new and resolved issues.&lt;/p&gt;
&lt;p&gt;We advise you to retest your projects.&lt;/p&gt;
&lt;p&gt;Once retesting:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Many issues will get new, &#8220;permanent&#8221; issue IDs (in the context of that Snyk project) and this will mean their old issue IDs will disappear.&lt;/li&gt;
&lt;li&gt;Reporting uses issue IDs to track their status, so this changeover will appear as a lot of issues being new and a lot of issues being resolved.&lt;/li&gt;
&lt;li&gt;These numbers also may not match exactly since, in the past, multiple issues could share the same old issue ID but that will no longer be the case.&lt;/li&gt;
&lt;li&gt;The URL of the issue on the Project page will stay the same - so any open tickets via Jira will remain linked.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Snyk Cloud in General Availability</title>
			<pubDate>Thu, 10 Nov 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Cloud-in-General-Availability</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Cloud-in-General-Availability_November_10_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://snyk.io/product/snyk-cloud/"&gt;Snyk Cloud&lt;/a&gt; is now in General Availability! &#127881; Snyk Cloud is the newest product to join the Snyk Platform, enabling developer-focused cloud security across the SDLC with the following features:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/products/snyk-cloud/getting-started-with-snyk-cloud-aws"&gt;AWS&lt;/a&gt; and &lt;a href="https://docs.snyk.io/products/snyk-cloud/getting-started-with-snyk-cloud-google"&gt;Google Cloud&lt;/a&gt; support, with onboarding available in the UI and API, with Azure coming soon.&lt;/li&gt;
&lt;li&gt;An &lt;a href="https://docs.snyk.io/products/snyk-cloud/snyk-cloud-issues/view-cloud-issues-in-the-snyk-web-ui"&gt;Organization-wide Issues UI&lt;/a&gt; with faceted filter search and drill-downs for remediation guidance and resource context.&lt;/li&gt;
&lt;li&gt;A unified policy engine built on Open Policy Agent with &lt;a href="https://snyk.io/security-rules/cloud/"&gt;security rules&lt;/a&gt; that consistently validate IaC and Cloud configurations across the software development life cycle (SDLC).&lt;/li&gt;
&lt;li&gt;An API for &lt;a href="https://docs.snyk.io/products/snyk-cloud/view-snyk-cloud-resources"&gt;viewing all resources&lt;/a&gt; and configurations across an Organization.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/integrated-infrastructure-as-code/adding-cloud-context-to-your-iac-test"&gt;Cloud context for IaC issues&lt;/a&gt; to minimize false positives, available in Limited Availability for &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/integrated-infrastructure-as-code"&gt;integrated IaC&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;View our &lt;a href="https://docs.snyk.io/products/snyk-cloud"&gt;Snyk Cloud documentation&lt;/a&gt; for more information, and reach out to your account executive if you&#8217;re interested in trying it out!&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; Snyk Cloud is currently available only for Business and Enterprise plans.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New &amp; revamped reporting</title>
			<pubDate>Wed, 09 Nov 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#New-&amp;-revamped-reporting</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#New-&amp;-revamped-reporting_November_9_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re excited to update that Snyk&#8217;s revamped reporting is now in open beta, providing you with easy, comprehensive, and granular security visibility across your applications!&lt;/p&gt;
&lt;p&gt;If you are a Snyk Business or Snyk Enterprise customer you can immediately try these new capabilities for yourself by enabling them via Snyk Preview (&lt;strong&gt;Settings &#8594; Snyk Preview&lt;/strong&gt;).&lt;/p&gt;
&lt;p&gt;Key new and improved capabilities include the addition of Snyk Code issues in reporting, more filters including CVE, CWE, project tags/attributes, shareable filters, export to CSV &amp;amp; PDF, and overall improved experience and performance.&lt;/p&gt;
&lt;p&gt;We&#8217;ve put together a blog post describing all these changes. Check it out &lt;a href="https://snyk.io/blog/snyk-new-reporting-beta"&gt;here&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For more details, please see our &lt;a href="https://docs.snyk.io/features/snyk-reports/reporting-beta-2022"&gt;user documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Feedback? We want to hear from you! Please send us your input via &lt;a href="https://snykteam.typeform.com/to/n6KikZLa"&gt;this&lt;/a&gt; form.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Join us for SnykLaunch on November 8th!</title>
			<pubDate>Thu, 03 Nov 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Join-us-for-SnykLaunch-on-November-8th!</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Join-us-for-SnykLaunch-on-November-8th!_November_3_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You're invited to tune in to Snyk Launch with Snyk&#8217;s product leaders, Adi Sharabani, CTO, and Manoj Nair, CPO for the first look at our newest products and releases!&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;When:&lt;/strong&gt; Tuesday, November 8, 2022 @ 8:00&#8211;9:00 a.m. PT / 11:00 a.m.&#8211;12:00 p.m. ET / 4:00&#8211;5:00 p.m. GMT&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;What:&lt;/strong&gt; We'll have live demos of the latest features and innovations in Snyk&#8217;s developer security platform, including:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Snyk Cloud&lt;/li&gt;
&lt;li&gt;Supply chain security innovations&lt;/li&gt;
&lt;li&gt;Enhanced reporting capabilities&lt;/li&gt;
&lt;li&gt;And much, much more!&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Register:&lt;/strong&gt; save your spot for SnykLaunch! &lt;a href="https://snyk.io/snyklaunch"&gt;https://snyk.io/snyklaunch&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Group Viewer role for Business and Enterprise customers</title>
			<pubDate>Wed, 02 Nov 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Group-Viewer-role-for-Business-and-Enterprise-customers</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Group-Viewer-role-for-Business-and-Enterprise-customers_November_2_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the release of a read-only role at Group level called &lt;strong&gt;Group Viewer&lt;/strong&gt;. This role would enable the users to check out Group level reports and all organization details associated within the Group.&lt;/p&gt;
&lt;p&gt;The full set of permissions associated with this role can be found &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-users-and-permissions/managing-permissions"&gt;here&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;All Business and Enterprise plan customers have access to this role. In the Group Members page, click on the role dropdown next to a member to find the new role and assign.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New UI rolling out from today</title>
			<pubDate>Wed, 26 Oct 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#New-UI-rolling-out-from-today</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#New-UI-rolling-out-from-today_October_26_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Starting today, and over the next few days, we&#8217;ll be rolling out our new UI to all users on app.snyk.io.&lt;/p&gt;
&lt;p&gt;For a quick refresher on the changes we&#8217;re introducing, read &lt;a href="https://snyk.io/blog/introducing-new-snyk-ui/"&gt;the blog post&lt;/a&gt;, or watch &lt;a href="https://training.snyk.io/learn/video/new-snyk-ui"&gt;this informative training video&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;And as a reminder, for anyone who cannot wait for the new UI to be enabled on their account, you can always opt in yourself via &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-settings/snyk-preview"&gt;Snyk Preview&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code - Support for APEX Scanning</title>
			<pubDate>Wed, 26 Oct 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Code-Support-for-APEX-Scanning</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Code-Support-for-APEX-Scanning_October_26_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Code will now support scanning of your native APEX code for vulnerabilities - this is available for all Snyk Code users as of today.&lt;/p&gt;
&lt;p&gt;There are no requirements needed to use this feature, as we are releasing it for general availability and will be available to any Snyk Code user.&lt;/p&gt;
&lt;p&gt;For more information on Snyk Code supported language please read our &lt;a href="https://docs.snyk.io/products/snyk-code/snyk-code-language-and-framework-support"&gt;user documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New UI available via Snyk Preview</title>
			<pubDate>Wed, 12 Oct 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#New-UI-available-via-Snyk-Preview</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#New-UI-available-via-Snyk-Preview_October_12_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The &lt;a href="https://snyk.io/blog/introducing-new-snyk-ui/"&gt;new UI&lt;/a&gt; for &lt;code&gt;app.snyk.io&lt;/code&gt; is now available to those who want to get an early look, via &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-settings/snyk-preview"&gt;Snyk Preview&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Key changes include a new vertical menu, navigation breadcrumbs, and an org switcher for easier switching between Snyk organizations (and groups for Snyk Enterprise customers).&lt;/p&gt;
&lt;p&gt;You can opt your organization in to the new experience via &lt;strong&gt;Settings&lt;/strong&gt; &amp;gt; &lt;strong&gt;Snyk Preview&lt;/strong&gt; &amp;gt; &lt;strong&gt;Use the new Snyk UI&lt;/strong&gt; &amp;gt; &#9989; &lt;strong&gt;Enabled&lt;/strong&gt; &amp;gt; &lt;strong&gt;Save&lt;/strong&gt;, or read &lt;a href="https://snyk.io/blog/introducing-new-snyk-ui/"&gt;the accompanying blog post&lt;/a&gt; for details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Unified Scanning API utilising Package URLs (purls)</title>
			<pubDate>Wed, 12 Oct 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Unified-Scanning-API-utilising-Package-URLs-(purls)</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Unified-Scanning-API-utilising-Package-URLs-(purls)_October_12_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have launched a powerful low-level API with which you can now directly check packages for vulnerabilities, enabling you to add package scanning into a huge number of possible workflows. This is launching with support for maven, npm, cocoapods, composer, gem, nuget, pypi, hex, cargo and generic (C/C++) packages, and is available to all Snyk Open Source customers. For more information on getting started, please refer to our &lt;a href="https://apidocs.snyk.io/?version=2022-09-15#get-/orgs/-org_id-/packages/-purl-/issues"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Proxy authentication in Snyk CLI for Windows</title>
			<pubDate>Wed, 05 Oct 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Proxy-authentication-in-Snyk-CLI-for-Windows</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Proxy-authentication-in-Snyk-CLI-for-Windows_October_5_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're announcing support for &lt;a href="https://en.wikipedia.org/wiki/SPNEGO"&gt;SPNEGO&lt;/a&gt;-based &lt;a href="https://en.wikipedia.org/wiki/Kerberos_(protocol)"&gt;Kerberos&lt;/a&gt; and &lt;a href="https://en.wikipedia.org/wiki/NT_LAN_Manager"&gt;NTLM&lt;/a&gt; proxy authentication protocol support in &lt;a href="https://github.com/snyk/cli"&gt;Snyk CLI&lt;/a&gt; for Windows, with support for other operating systems coming shortly.&lt;/p&gt;
&lt;p&gt;Snyk CLI detects the need to authenticate and discovers the appropriate authentication mechanism automatically once configured to use a proxy.&lt;/p&gt;
&lt;p&gt;Read &lt;a href="https://snyk.io/blog/proxy-authentication-in-snyk-cli-for-windows/"&gt;the accompanying blog&lt;/a&gt; or &lt;a href="https://docs.snyk.io/snyk-cli/configure-the-snyk-cli"&gt;our documentation on configuring a proxy in Snyk CLI&lt;/a&gt; for details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Command injection vulnerability in Snyk CLI versions released prior to September 1, 2022</title>
			<pubDate>Mon, 03 Oct 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Command-injection-vulnerability-in-Snyk-CLI-versions-released-prior-to-September-1,-2022</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Command-injection-vulnerability-in-Snyk-CLI-versions-released-prior-to-September-1,-2022_October_3_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Versions of the Snyk CLI prior to 1.996.0 are vulnerable to a medium severity command injection vulnerability. Note that this also impacts the CI and IDE integrations.&lt;/p&gt;
&lt;p&gt;If you are running an older version of the CLI then we recommend updating to the latest version to mitigate the risk.&lt;/p&gt;
&lt;p&gt;You can find more about this vulnerability on the following &lt;a href="https://snyk.io/blog/command-injection-vulnerability-cve-2022-40764/"&gt;blog post&lt;/a&gt; as well as on the &lt;a href="https://support.snyk.io/hc/en-us/articles/7015908293789"&gt;Snyk Support Portal&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>User Hub for knowledge resources</title>
			<pubDate>Thu, 22 Sep 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#User-Hub-for-knowledge-resources</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#User-Hub-for-knowledge-resources_September_22_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re very happy to announce a new &lt;a href="https://snyk.io/user-hub/"&gt;User Hub&lt;/a&gt; page, giving access to all knowledge resources for Snyk users.&lt;/p&gt;
&lt;p&gt;This resource connects Snyk users to all knowledge resources for using Snyk, such as:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;User documentation&lt;/strong&gt;: including &lt;a href="https://snyk.docs.apiary.io"&gt;API docs&lt;/a&gt; and &lt;a href="https://updates.snyk.io/"&gt;product updates&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Knowledge tools&lt;/strong&gt;: including &lt;a href="https://snyk.io/advisor/"&gt;Snyk Advisor&lt;/a&gt; and &lt;a href="https://security.snyk.io/"&gt;VulnDB&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Education resources&lt;/strong&gt;: including &lt;a href="https://training.snyk.io/"&gt;Snyk training&lt;/a&gt; and &lt;a href="https://learn.snyk.io/"&gt;Snyk Learn&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Community&lt;/strong&gt;: links to our &lt;a href="https://snyk.co/discordcommunity"&gt;Discord presence&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Default reviewer assignee to pull requests in Bitbucket Server / Data Center</title>
			<pubDate>Wed, 21 Sep 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Default-reviewer-assignee-to-pull-requests-in-Bitbucket-Server-/-Data-Center</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Default-reviewer-assignee-to-pull-requests-in-Bitbucket-Server-/-Data-Center_September_21_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to share that our Bitbucket Server / Data Center integration now supports &lt;a href="https://confluence.atlassian.com/bitbucketserver/add-default-reviewers-to-pull-requests-834221295.html"&gt;the default reviewers assignee settings in Bitbucket&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;From now on, any pull request opened by Snyk would be assigned to the default reviewer set in Bitbucket.&lt;/p&gt;
&lt;p&gt;This enhancement works out the box - nothing needs to be done unless you use Broker. If you use Broker on Bitbucket Server / Data Center, please make sure to update it to the latest version in order for this enhancement to work.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container - Improved Go binaries scanning</title>
			<pubDate>Thu, 08 Sep 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-Improved-Go-binaries-scanning</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-Improved-Go-binaries-scanning_September_8_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;With the release of the Snyk CLI version 1.999.0, support for Go binary scanning in containers has been extended and improved. As long as binaries are built with go module support enabled, Snyk now also scans Cgo binaries, binaries with stripped debug information (the -ldflags="-s -w" compiler setting), binaries built with the -trimpath compiler setting and binaries with vendored dependencies.&lt;/p&gt;
&lt;p&gt;Read more about application dependency scanning in our &lt;a href="https://docs.snyk.io/products/snyk-container/getting-around-the-snyk-container-ui/detecting-application-vulnerabilities-in-container-images"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Projects page performance enhancements: pagination and grouping</title>
			<pubDate>Tue, 06 Sep 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Projects-page-performance-enhancements-pagination-and-grouping</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Projects-page-performance-enhancements-pagination-and-grouping_September_6_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;To improve the overall Projects page performance, Snyk added pagination and the ability to organize projects.&lt;/p&gt;
&lt;p&gt;Currently, every request or filter you apply on the Projects page involves retrieving all the targets and projects for the page. For enterprise users with hundreds of thousands of imported projects, this can result in prolonged load times. Adding pagination can improve the Projects page load time by up to 90%.&lt;/p&gt;
&lt;p&gt;View our &lt;a href="https://docs.snyk.io/snyk-web-ui/introduction-to-snyk-projects"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container now supports scanning Python applications in the CLI &amp; Kubernetes Integration</title>
			<pubDate>Tue, 06 Sep 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-now-supports-scanning-Python-applications-in-the-CLI-&amp;-Kubernetes-Integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-now-supports-scanning-Python-applications-in-the-CLI-&amp;-Kubernetes-Integration_September_6_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce that Snyk Container now detect vulnerable dependencies of Python applications (Poetry and Pip) in a container image when scanning through the CLI or through the Kubernetes integration. This change is available in CLI version 1.998.0. We also improved the container registry scanning and added Poetry support.&lt;/p&gt;
&lt;p&gt;Read our &lt;a href="https://docs.snyk.io/products/snyk-container/getting-around-the-snyk-container-ui/detecting-application-vulnerabilities-in-container-images"&gt;documentation&lt;/a&gt; to understand more about container application scanning.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Open Source, Infrastructure as Code and Code support in Eclipse</title>
			<pubDate>Tue, 06 Sep 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Open-Source,-Infrastructure-as-Code-and-Code-support-in-Eclipse</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Open-Source,-Infrastructure-as-Code-and-Code-support-in-Eclipse_September_6_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The support for Infrastructure as Code, Code and Open Source (improved) in Eclipse is now officially released &#127881;. This includes automatic analysis, inline highlights on hover, gutter icons, squiggly line and problems tab integration.&lt;/p&gt;
&lt;h4&gt;How to get started if I&#8217;m using &lt;strong&gt;Eclipse&lt;/strong&gt;?&lt;/h4&gt;
&lt;p&gt;For &lt;strong&gt;Eclipse&lt;/strong&gt; use the normal path to upgrade the software, or get the &lt;a href="https://marketplace.eclipse.org/content/snyk-security-code-open-source-iac-configurations"&gt;latest plugin from the marketplace&lt;/a&gt;.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Here is how to enable it for &lt;strong&gt;Neovim&lt;/strong&gt;: &lt;a href="https://docs.snyk.io/ide-tools/language-server-beta#example-configuration-for-neovim"&gt;https://docs.snyk.io/ide-tools/language-server-beta#example-configuration-for-neovim&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Here is how to enable it for &lt;strong&gt;Sublime Text&lt;/strong&gt;: &lt;a href="https://docs.snyk.io/ide-tools/language-server-beta#example-configuration-for-sublime-text"&gt;https://docs.snyk.io/ide-tools/language-server-beta#example-configuration-for-sublime-text&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Please see our &lt;a href="https://docs.snyk.io/ide-tools/eclipse-plugin"&gt;documentation&lt;/a&gt; for more information or reach out if you have any questions and suggestions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Learn - New lesson - DOM XSS for JavaScript</title>
			<pubDate>Mon, 22 Aug 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-New-lesson-DOM-XSS-for-JavaScript</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-New-lesson-DOM-XSS-for-JavaScript_August_22_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Let's hack! Walk through an example of exploiting &lt;a href="https://learn.snyk.io/lessons/dom-based-xss/javascript/"&gt;DOM XSS&lt;/a&gt; vulnerabilities! This lesson looks at some vulnerable code and goes over mitigation techniques.&lt;/p&gt;
&lt;p&gt;DOM XSS is our latest JavaScript lesson. Check out &lt;a href="https://learn.snyk.io"&gt;Snyk Learn&lt;/a&gt; for more lessons in JavaScript and many other languages.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Introducing Snyk Training</title>
			<pubDate>Thu, 18 Aug 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Introducing-Snyk-Training</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Introducing-Snyk-Training_August_18_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://training.snyk.io/"&gt;Snyk Training&lt;/a&gt; is an easy way for teams to get an introduction to Snyk tools and user best practices. Most courses take between 3 and 10 minutes.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;The &lt;a href="https://training.snyk.io/pages/implement"&gt;Implement Snyk courses&lt;/a&gt; focus on key decisions and tasks when implementing Snyk, such as determining the organization structure and setting up single sign-on.&lt;/li&gt;
&lt;li&gt;The &lt;a href="https://training.snyk.io/pages/org-admins"&gt;Configure and manage Snyk courses&lt;/a&gt; focus on tasks to set up and manage a Snyk organization, including setting notification defaults, configuring integrations, and managing members.&lt;/li&gt;
&lt;li&gt;The &lt;a href="https://training.snyk.io/pages/dev-tasks"&gt;Find and fix issues with Snyk courses&lt;/a&gt; focus on developer tasks for getting started with the CLI, an IDE plug-in, or using Snyk in the web UI. The &lt;a href="https://training.snyk.io/pages/video-library"&gt;Video Library &lt;/a&gt;provides an even easier way to learn these developer tasks.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;To browse the entire Snyk Training catalog, visit &lt;a href="https://training.snyk.io/"&gt;https://training.snyk.io/&lt;/a&gt;. Sign up to track your learning progress.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved public repo monitoring</title>
			<pubDate>Mon, 15 Aug 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-public-repo-monitoring</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-public-repo-monitoring_August_15_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;A new version of Snyk&#8217;s Monitor Public GitHub Repos feature has been released to improve scalability and platform support. Using this feature you are able to monitor public repositories not directly owned by your SCM account through a GitHub integration connected by a user in your Snyk organization. With this release your followed projects will now trigger notifications according to your preferences, and be visible in reports.&lt;/p&gt;
&lt;p&gt;Existing monitored public GitHub repos will be migrated, and no action is required for organizations where a user has already connected a GitHub SCM integration.&lt;/p&gt;
&lt;p&gt;If you do not already have a GitHub integration connected, action is required to maintain recurring testing of these projects. Projects without access to a GitHub integration will remain static and their scan results will not reflect changes made at the public GitHub repository. Instructions for adding a GitHub integration can be found in our &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/github-integration"&gt;documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For more information about this feature, see the &#128214; &lt;a href="https://docs.snyk.io/integrations/git-repository-scm-integrations/github-read-only-projects"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Nexus Repository Manager integration</title>
			<pubDate>Tue, 19 Jul 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Nexus-Repository-Manager-integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Nexus-Repository-Manager-integration_July_19_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the new &lt;a href="https://docs.snyk.io/integrations/private-registry-integrations/nexus-repo-manager-setup"&gt;Nexus Repository Manager integration&lt;/a&gt; for Snyk Open Source! &#128640;&lt;/p&gt;
&lt;p&gt;This integration enables Snyk to resolve all direct and transitive dependencies of packages hosted in Nexus when testing Maven projects imported from Git, and calculate more complete and accurate dependency graphs.&lt;/p&gt;
&lt;p&gt;Snyk will also use this integration to access private dependencies when creating Pull/Merge Requests, and update npm/yarn lockfiles using the correct URLs.&lt;/p&gt;
&lt;p&gt;This release fully supports Nexus 3.x. Support for Nexus 2.15 and above is in open beta.&lt;/p&gt;
&lt;p&gt;The integration is available on Enterprise plans.&lt;/p&gt;
&lt;p&gt;To get started, see the &#128214; &lt;a href="https://docs.snyk.io/integrations/private-registry-integrations/nexus-repo-manager-setup"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Gradle 7 CLI support</title>
			<pubDate>Thu, 14 Jul 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Gradle-7-CLI-support</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Gradle-7-CLI-support_July_14_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that Snyk Open Source now officially supports Gradle 7 in the &lt;a href="https://docs.snyk.io/snyk-cli"&gt;Snyk CLI&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;You can now confidently run &lt;code&gt;snyk test&lt;/code&gt; and &lt;code&gt;snyk monitor&lt;/code&gt; in your Gradle 7 projects, and see the complete picture of their dependencies, vulnerabilities and licence usage.&lt;/p&gt;
&lt;p&gt;This support covers Gradle 7.0 and all minor versions above.&lt;/p&gt;
&lt;p&gt;It is recommended you upgrade to Snyk CLI v1.969.0 or higher for the best experience.&lt;/p&gt;
&lt;p&gt;See the Snyk Open Source &lt;a href="https://docs.snyk.io/products/snyk-open-source/language-and-package-manager-support/snyk-for-java-gradle-maven"&gt;Gradle documentation&lt;/a&gt; and &lt;a href="https://docs.snyk.io/snyk-cli/commands"&gt;CLI help&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved CLI Output for Snyk IaC</title>
			<pubDate>Tue, 12 Jul 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-CLI-Output-for-Snyk-IaC</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-CLI-Output-for-Snyk-IaC_July_12_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Improved the CLI Output for Snyk IaC to provide you with more informative and actionable feedback. The new CLI Output has been optimised for readability and displays issues in a more clear way to help you find your issues faster and take action to remediate them.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What's Changed?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;&lt;strong&gt;Issues Section&lt;/strong&gt; - View more useful information related to your issues.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Issues Ordered by Severity&lt;/strong&gt; - Issues are now displayed by severity to help you focus on the most important issues.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary Section&lt;/strong&gt; - The new summary section has been redesigned to help you get a quick view of your scan.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What should you do?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;To get access to the improved CLI Output:&lt;/p&gt;
&lt;p&gt;Update your CLI to v1.970.0 or later.&lt;/p&gt;
&lt;p&gt;View the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/snyk-cli-for-infrastructure-as-code/understanding-the-cli-test-output"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container - CLI application vulnerabilities are now supported in a JSON output</title>
			<pubDate>Tue, 12 Jul 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-CLI-application-vulnerabilities-are-now-supported-in-a-JSON-output</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-CLI-application-vulnerabilities-are-now-supported-in-a-JSON-output_July_12_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;In CLI version 1.962.0, when using the &lt;code&gt;--json&lt;/code&gt; flag together with the &lt;code&gt;--app-vulns&lt;/code&gt; flag, we now list operating system as well as application vulnerabilities in a JSON format. Before the change, using the &lt;code&gt;--app-vulns&lt;/code&gt; flag together with the &lt;code&gt;--json&lt;/code&gt; was not possible.&lt;/p&gt;
&lt;p&gt;This improvement is one step towards supporting an upcoming change that will allow the CLI to scan application vulnerabilities by default (without the need to specify the &lt;code&gt;--app-vulns&lt;/code&gt; flag).&lt;/p&gt;
&lt;p&gt;We have added a new JSON key called &#8216;applications&#8217; that includes an array of all application scan results. The new JSON format will look like the following:&lt;/p&gt;
&lt;p&gt;&lt;code&gt;json
`{
  "vulnerabilities": [],
  "ok": true,
  "dependencyCount": 13,
  ...
  "packageManager": "apk",
  "summary": "No known vulnerabilities",
  "uniqueCount": 0,
  "projectName": "docker-image|snykgoof/os-app",
  "platform": "linux/amd64",
  "path": "snykgoof/os-app:node-snykin/os-app",
  "applications": [
    {
      "vulnerabilities": [
        {
          A bunch of vulns
        },
        ...
      ],
      "ok": false,
      "dependencyCount": 116,
      "packageManager": "yarn",
      "summary": "14 vulnerable dependency paths",
      "uniqueCount": 9,
      "targetFile": "/app2/package.json",
      "projectName": "snykin",
      "displayTargetFile": "/app2/package.json",
      "path": "snykgoof/os-app:node-snykin"
    }
  ]
}`&lt;/code&gt;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Changes to the default behaviour for path arguments for Snyk IaC test scans</title>
			<pubDate>Mon, 11 Jul 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Changes-to-the-default-behaviour-for-path-arguments-for-Snyk-IaC-test-scans</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Changes-to-the-default-behaviour-for-path-arguments-for-Snyk-IaC-test-scans_July_11_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;h4&gt;What's Changing?&lt;/h4&gt;
&lt;p&gt;We are changing the behaviour of snyk iac test to only scan files within your current working directory.&lt;/p&gt;
&lt;p&gt;Currently when a user runs snyk iac test ../my-folder the command will be executed. However after the change if you try to run snyk iac test ../my-folder it will return an error.&lt;/p&gt;
&lt;p&gt;We are making this change to create a more consistent and predictable way of how we group and display findings from scanning your directories and files.&lt;/p&gt;
&lt;p&gt;Please see &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/snyk-cli-for-infrastructure-as-code/test-your-configuration-files"&gt;documentation&lt;/a&gt; for more information.&lt;/p&gt;
&lt;h4&gt;When is this happening?&lt;/h4&gt;
&lt;p&gt;Using path arguments outside of your current working directory is unsupported from CLI v1.968.0 onwards.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Learn - Learning progress</title>
			<pubDate>Thu, 07 Jul 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-Learning-progress</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-Learning-progress_July_7_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to announce the release of &lt;code&gt;Learning progress&lt;/code&gt;, enabling developers to get a better overview of their progress with learning security:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Categories&lt;/strong&gt;: insights about the education of the specific domain&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;In-progress&lt;/strong&gt;: easily find where you stopped and continue learning&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Recommended&lt;/strong&gt;: lessons that are mostly related to your expertise&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Snyk Learn - Reporting</title>
			<pubDate>Tue, 05 Jul 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-Reporting</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-Reporting_July_5_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to announce that Snyk`s Learn reporting is released and can be accessed without further action. Our goal for this iteration was to provide you visibility over the adoption metrics of security education. We provide you:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Lessons Overview&lt;/strong&gt;: which lessons your colleagues have viewed, and what security issues do they cover.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;User Overview&lt;/strong&gt;: how many lessons your colleagues have viewed.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Category Overview&lt;/strong&gt;: which categories your colleagues have selected in their profile.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Soon we will also provide a personal overview so that every developer is able to easily assess his knowledge and start or continue their learnings.&lt;/p&gt;
&lt;p&gt;Stay tuned &#128075;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Custom User Roles</title>
			<pubDate>Wed, 29 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Custom-User-Roles</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Custom-User-Roles_June_29_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce Snyk&#8217;s new role-based access management capabilities, providing admins with greater flexibility in managing Snyk access in your organization!&lt;/p&gt;
&lt;p&gt;Group admins can now grant users the permissions they need to do their jobs across the Snyk platform - and only those permissions - by creating their own customized roles and assigning specific, organization-level permissions to them.&lt;/p&gt;
&lt;p&gt;&lt;em&gt;Applicable to Enterprise plan only.&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;For more information, read our &lt;a href="https://snyk.io/blog/announcing-customized-role-based-access-controls/"&gt;blog&lt;/a&gt; or refer to our &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-users-and-permissions/member-roles"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk is now also hosted in the EU (Frankfurt)!</title>
			<pubDate>Tue, 28 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-is-now-also-hosted-in-the-EU-(Frankfurt)!</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-is-now-also-hosted-in-the-EU-(Frankfurt)!_June_28_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce that Snyk is now also hosted in the EU (Frankfurt), enabling Snyk customers to comply with European data residency requirements to store data in Europe.&lt;/p&gt;
&lt;p&gt;This new deployment option is currently available for new Snyk customers only. Migration from other regions and Snyk&#8217;s other deployment options will be supported in the future.&lt;/p&gt;
&lt;p&gt;For more information on this announcement, please refer to &lt;a href="https://snyk.io/blog/snyk-now-hosted-in-eu/"&gt;our blog&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Learn - Homepage &amp; Lessons Library</title>
			<pubDate>Mon, 20 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-Homepage-&amp;-Lessons-Library</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Learn-Homepage-&amp;-Lessons-Library_June_20_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Learn has become a valuable resource for developers to learn about application security. Today we are incredibly happy to announce the release of our new &lt;em&gt;Homepage &amp;amp; Lessons Library&lt;/em&gt;.&lt;/p&gt;
&lt;p&gt;Now it is even easier to navigate across various security lessons or categories. The new homepage showcases all the benefits Snyk Learn brings to the teams, in particular in combination with other Snyk products and just-in-time integration into the developers&#8217; workflow.&lt;/p&gt;
&lt;p&gt;Check it out today, we are eager to hear your feedback: &lt;a href="https://learn.snyk.io"&gt;&lt;strong&gt;https://learn.snyk.io&lt;/strong&gt;&lt;/a&gt;&lt;/p&gt;
&lt;h4&gt;&lt;a href="https://learn.snyk.io/"&gt;New homepage&lt;/a&gt;&lt;/h4&gt;
&lt;h4&gt;&lt;a href="https://learn.snyk.io/lessons/"&gt;Lessons library&lt;/a&gt;&lt;/h4&gt;</description>
		</item>
		<item>
			<title>Snyk IaC Settings page now available to &#8216;Collaborator&#8217; user roles</title>
			<pubDate>Mon, 20 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-Settings-page-now-available-to-Collaborator-user-roles</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-Settings-page-now-available-to-Collaborator-user-roles_June_20_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Users with &#8216;&lt;strong&gt;Collaborator&lt;/strong&gt;&#8217; permissions can now view and make changes to IaC settings in the Snyk app Infrastructure as Code setting sidebar.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;This includes:&lt;/strong&gt;&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;Enabling config file detection.&lt;/li&gt;
&lt;li&gt;Customizing rule severity settings.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Changes to the default behaviour for path arguments for Snyk IaC test scans</title>
			<pubDate>Fri, 10 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Changes-to-the-default-behaviour-for-path-arguments-for-Snyk-IaC-test-scans</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Changes-to-the-default-behaviour-for-path-arguments-for-Snyk-IaC-test-scans_June_10_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;h4&gt;&lt;strong&gt;What's Changing?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;We are changing the behaviour of snyk iac test to only scan files within your current working directory.&lt;/p&gt;
&lt;p&gt;Currently when a user runs &lt;code&gt;snyk iac test ../my-folder&lt;/code&gt; the command will be executed. However after the change if you try to run &lt;code&gt;snyk iac test ../my-folder&lt;/code&gt; it will return an error.&lt;/p&gt;
&lt;p&gt;We are making this change to create a more consistent and predictable way of how we group and display findings from scanning your directories and files.&lt;/p&gt;
&lt;p&gt;Please see &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/snyk-cli-for-infrastructure-as-code/test-your-configuration-files"&gt;documentation&lt;/a&gt; for more information.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;When is this happening?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;We will change this behaviour on 11th July 2022.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Unknown versions vulnerability reporting fix</title>
			<pubDate>Thu, 09 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Unknown-versions-vulnerability-reporting-fix</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Unknown-versions-vulnerability-reporting-fix_June_9_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;In certain situations (&lt;a href="https://support.snyk.io/hc/en-us/articles/4934749708829"&gt;Why does my Maven package show Unknown version&lt;/a&gt;), Maven, Gradle and SBT projects imported via Git can contain dependencies where Snyk is unable to determine the version.&lt;/p&gt;
&lt;p&gt;On Feb 17th, 2022, a change was released to label these versions as &lt;code&gt;unknown&lt;/code&gt;. This caused Snyk to report such dependencies as being affected by &lt;em&gt;all&lt;/em&gt; the vulnerabilities for that package, and may have led to false positives for issues not relevant to the actual version used.&lt;/p&gt;
&lt;p&gt;On June 17th, 2022, we will roll out a fix with the following changes:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Stop reporting vulnerabilities for dependencies with &lt;code&gt;unknown&lt;/code&gt; versions&lt;/li&gt;
&lt;li&gt;Add a UI component to project pages to make it clear when they contain dependencies with &lt;code&gt;unknown&lt;/code&gt; versions&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;When this change is deployed, you may see the number of vulnerabilities in your projects go down.&lt;/p&gt;
&lt;p&gt;Note: you can see dependencies with &lt;code&gt;unknown&lt;/code&gt; versions in Reports. While it is not currently possible to filter dependencies by version in the Reports UI, you can export as CSV for analysis.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved Snyk CLI accuracy for Gradle projects</title>
			<pubDate>Wed, 08 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-Snyk-CLI-accuracy-for-Gradle-projects</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-Snyk-CLI-accuracy-for-Gradle-projects_June_8_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;h4&gt;&lt;strong&gt;What's changing?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;Currently, the Snyk CLI excludes Gradle configurations set as &lt;code&gt;isResolvable: true &amp;amp;&amp;amp; isConsumable: true&lt;/code&gt;. The reason for excluding these is because according to &lt;a href="https://docs.gradle.org/current/userguide/declaring_dependencies.html#sec:resolvable-consumable-configs"&gt;docs.gradle.org&lt;/a&gt; about declaring dependencies, this combination is deprecated and shouldn&#8217;t be used.&lt;/p&gt;
&lt;p&gt;However, many applications still include configurations like these, so we are changing behaviour to include them in Snyk CLI scans.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What will you see?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;You should see more accurate results in the Snyk CLI for applications using &lt;code&gt;isResolvable: true &amp;amp;&amp;amp; isConsumable: true&lt;/code&gt; configurations.&lt;/p&gt;
&lt;p&gt;This might mean an increase in the number of dependencies, and/or different resolved versions for existing dependencies.&lt;/p&gt;
&lt;p&gt;By reporting more and different versions of dependencies, the number of vulnerabilities may also potentially increase.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;When is this happening?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;This change will be released in a new version of the Snyk CLI on June 16th.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved CLI Output for Snyk IaC</title>
			<pubDate>Mon, 06 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-CLI-Output-for-Snyk-IaC</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-CLI-Output-for-Snyk-IaC_June_6_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Improved the CLI Output for Snyk IaC to provide you with more informative and actionable feedback. The new CLI Output has been optimised for readability and displays issues in a more clear way to help you find your issues faster and take action to remediate them.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What's Changed?&lt;/strong&gt;&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Issues Section&lt;/strong&gt; - View more useful information related to your issues.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Issues Ordered by Severity&lt;/strong&gt; - Issues are now displayed by severity to help you focus on the most important issues.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Summary Section&lt;/strong&gt; - The new summary section has been redesigned to help you get a quick view of your scan.&lt;/li&gt;
&lt;/ul&gt;
&lt;h4&gt;&lt;strong&gt;What should you do to enable this?&lt;/strong&gt;&lt;/h4&gt;
&lt;ol&gt;
&lt;li&gt;To get access to the improved CLI Output:&lt;/li&gt;
&lt;li&gt;Log on to the Snyk Platform&lt;/li&gt;
&lt;li&gt;Head over to Settings &amp;gt; Snyk Preview&lt;/li&gt;
&lt;li&gt;Enable &#8220; Additional CLI result information for Infrastructure as Code&#8221;&lt;/li&gt;
&lt;li&gt;Update your CLI to v1.939.0 or later&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;View the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/snyk-cli-for-infrastructure-as-code/understanding-the-cli-test-output"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved UI for Snyk IaC</title>
			<pubDate>Wed, 01 Jun 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-UI-for-Snyk-IaC</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-UI-for-Snyk-IaC_June_1_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Improved UI for Snyk IaC include Terraform, CloudFormation, and Kubernetes files. You now have a detailed view displaying one code snippet per issue, making it easier to identify the issue in code and creating consistency across the UI for Helm chart files and Snyk Code projects.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What has changed?&lt;/strong&gt;&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Filter by Severity&lt;/strong&gt;: sort by severity of Critical, High, Medium, and Low&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Work by Misconfiguration&lt;/strong&gt;: the file is separated into misconfiguration issues and code snippets, instead of a code block of the entire file containing issues.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Full Details&lt;/strong&gt; - view the full file for additional configuration context.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;View the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/using-snyk-iac-via-web#issue-card-details"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>You can now &#8203;&#8203;detect cloud infrastructure drift and unmanaged Terraform resources via the Snyk CLI</title>
			<pubDate>Mon, 09 May 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#You-can-now-detect-cloud-infrastructure-drift-and-unmanaged-Terraform-resources-via-the-Snyk-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#You-can-now-detect-cloud-infrastructure-drift-and-unmanaged-Terraform-resources-via-the-Snyk-CLI_May_9_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Using the CLI command you can:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Detect drift within a specific feature or cloud environment&lt;/li&gt;
&lt;li&gt;Discover unmanaged resources in your cloud environments&lt;/li&gt;
&lt;li&gt;See % IaC coverage of your cloud environments&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;This release includes a brand new CLI UI for clearer reporting. For usage and constraints, please see the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources"&gt;product documentation&lt;/a&gt;, the &lt;a href="https://snyk.io/blog/detect-infrastructure-drift-unmanaged-resources-snyk-iac/"&gt;release blog post&lt;/a&gt; or the &lt;a href="https://docs.snyk.io/snyk-cli/commands/iac-describe"&gt;Snyk CLI help&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Secure your IaC in Terraform Cloud</title>
			<pubDate>Wed, 04 May 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Secure-your-IaC-in-Terraform-Cloud</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Secure-your-IaC-in-Terraform-Cloud_May_4_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The Snyk run tasks integration automates security and compliance in Terraform Cloud workflows.&lt;/p&gt;
&lt;p&gt;Using the Snyk integration you can:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Track security and compliance status of your workspaces&lt;/li&gt;
&lt;li&gt;Manage security guardrails and policy enforcement across workspaces&lt;/li&gt;
&lt;li&gt;Resolve security misconfigurations with fix guidance in Snyk&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;To start, navigate to your Integrations page in Terraform cloud and connect Snyk to your workspaces.&lt;/p&gt;
&lt;p&gt;This feature is available on all Snyk plans.&lt;/p&gt;
&lt;p&gt;For usage and context, see the &lt;a href="https://docs.snyk.io/integrations/ci-cd-integrations/integrating-snyk-with-terraform-cloud"&gt;Terraform Cloud integration documentation&lt;/a&gt; and &lt;a href="https://snyk.io/blog/snyk-iac-security-terraform-cloud/"&gt;our blog post&lt;/a&gt;. Also available is a great &lt;a href="https://learn.hashicorp.com/tutorials/terraform/cloud-run-tasks-snyk"&gt;Hashicorp + Snyk tutorial&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Support for Terraform Variables in Snyk IaC</title>
			<pubDate>Wed, 04 May 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Support-for-Terraform-Variables-in-Snyk-IaC</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Support-for-Terraform-Variables-in-Snyk-IaC_May_4_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Scanning for Terraform Variables is now released in the Snyk CLI &#127881;.&lt;/p&gt;
&lt;p&gt;&lt;code&gt;snyk iac test&lt;/code&gt; will now process IaC configurations defined using variables, enabling greater security findings and more accurate results.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Upgrade&lt;/strong&gt; Snyk CLI to v1.868.0 or above and run &lt;code&gt;snyk iac test&lt;/code&gt; as usual in your directory with TF files.&lt;/p&gt;
&lt;p&gt;For usage and constraints, see our &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/scan-terraform-files/terraform-variables-support"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container - Custom Base Image Recommendations</title>
			<pubDate>Sun, 01 May 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-Custom-Base-Image-Recommendations</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Container-Custom-Base-Image-Recommendations_May_1_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce that custom base image recommendations for Snyk Container are now available as an Open Beta &#127881;.&lt;/p&gt;
&lt;p&gt;Using the custom base image recommendation feature, Snyk can recommend an image upgrade from a pool of the customer&#8217;s internal images. This allows teams to be notified of newer and more secure versions of their internal base images.&lt;/p&gt;
&lt;p&gt;This feature is available for Business and Enterprise pricing plans.&lt;/p&gt;
&lt;p&gt;View the &lt;a href="https://docs.snyk.io/products/snyk-container/getting-around-the-snyk-container-ui/custom-base-image-recommendations"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk IaC - CLI Share Test Results</title>
			<pubDate>Tue, 12 Apr 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-CLI-Share-Test-Results</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-CLI-Share-Test-Results_April_12_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce that the ability for the Snyk IaC CLI to share test results with the Snyk platform is now available in open beta &#127881;.&lt;/p&gt;
&lt;p&gt;This feature is available on all plans and is now live.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What can you expect:&lt;/strong&gt;&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;Share test results from the CLI to the Snyk Platform.&lt;/li&gt;
&lt;li&gt;Issues ignored locally on the CLI will be ignored on the Snyk Platform.&lt;/li&gt;
&lt;li&gt;Users can share the origin of their code base with the target reference flag.&lt;/li&gt;
&lt;li&gt;Users can add tags and attributes locally to share with the Snyk Platform.&lt;/li&gt;
&lt;/ul&gt;
&lt;h4&gt;&lt;strong&gt;What does this mean for you?&lt;/strong&gt;&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Update&lt;/strong&gt; to the latest version of the Snyk CLI (v1.899.0).&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Run&lt;/strong&gt; command &lt;code&gt;snyk iac test --report&lt;/code&gt; to use the new feature.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;View the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/share-cli-results-with-the-snyk-app"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Oracle Linux Security Data Improvements - Upcoming Changes</title>
			<pubDate>Tue, 12 Apr 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Oracle-Linux-Security-Data-Improvements-Upcoming-Changes</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Oracle-Linux-Security-Data-Improvements-Upcoming-Changes_April_12_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We would like to inform you about upcoming changes to how we provide security data for the &lt;a href="https://www.oracle.com/linux/"&gt;Oracle Linux&lt;/a&gt; platforms.&lt;/p&gt;
&lt;p&gt;As part of a continual effort to improve our container security data, we are changing how we provide information for Oracle Linux vulnerabilities. Prior to these changes, we provided information on Oracle Linux vulnerabilities only through Erreta Linux Security Advisories (ELSA), which are collections of fixed CVEs. We are moving from ELSA, and instead will present issues based on the individual CVEs.&lt;/p&gt;
&lt;h4&gt;The following are some of the key features of this change:&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Enhanced accuracy&lt;/strong&gt;: By showing individual CVEs instead of an ELSA, which may cover more than one CVE, you will have more details about each vulnerability Snyk detects.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Enriched metadata&lt;/strong&gt;: Showing individual CVEs allows us to provide enriched vulnerability metadata on these CVEs, like &lt;a href="https://snyk.io/blog/prioritizing-container-vulnerabilities-with-exploit-maturity/"&gt;Exploit Maturity&lt;/a&gt;, &lt;a href="https://snyk.io/blog/social-media-for-security-intelligence/"&gt;Social Trends&lt;/a&gt; and more.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Oracle&#8217;s security analysis&lt;/strong&gt;: We will provide the severity of the issues as defined by the Oracle Security team (Low, Moderate, Important, Critical), in addition to the severity determined by NVD, as part of the &lt;a href="https://docs.snyk.io/products/snyk-container/snyk-container-security-basics/understanding-linux-vulnerability-severity"&gt;Relative Importance&lt;/a&gt; feature.&lt;/li&gt;
&lt;/ul&gt;
&lt;h4&gt;Important notes:&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;Old data will no longer be accessible once the new data is available.&lt;/li&gt;
&lt;li&gt;The current unique public Snyk IDs will be obsolete.&lt;/li&gt;
&lt;li&gt;The number of issues will increase significantly as a result of this change - you may notice an increase in the Reports graphs.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The rollout will start tomorrow, on April 13th. After the change, rescanning of the project is required (either a manual test or scheduled scanning for monitored projects).&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved UI for Snyk IaC</title>
			<pubDate>Tue, 11 Apr 2023 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-UI-for-Snyk-IaC</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-UI-for-Snyk-IaC_April_11_2023</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk IaC has a new look &#127881;. Terraform, CloudFormation, and Kubernetes files now have a detailed row view displaying one code snippet per issue, making it easier to identify the issue in code and creating consistency across the UI for Helm chart files and Snyk Code projects.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What has changed?&lt;/strong&gt;&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;Filter by severity: sort by severity of High, Medium, and Low&lt;/li&gt;
&lt;li&gt;Work by misconfiguration: the file is separated into misconfiguration issues and code snippets, instead of a code block of the entire file containing issues.&lt;/li&gt;
&lt;li&gt;&#8216;Ignore&#8217; button is now located underneath code snippet&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;To temporarily continue using the previous UI view, you can opt-out of the update via our feature flag under Snyk Preview. Opting out is a temporary action as the previous UI will be deprecated in a month&#8217;s time.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Announcing C/C++ for Snyk Open Source</title>
			<pubDate>Tue, 05 Apr 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Announcing-C/C++-for-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Announcing-C/C++-for-Snyk-Open-Source_April_5_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to extend Snyk&#8217;s developer-first experience to one of the oldest and largest developer communities. Today, we are announcing the general availability of C/C++ in Snyk Open Source, enabling development and security teams to find and fix known security vulnerabilities in their C/C++ open source library dependencies.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://snyk.io/blog/c-cpp-security-scanning-unmanaged-snyk-open-source"&gt;Check out the details&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>CVE-2022-22965 - &#8220;SpringShell&#8221; RCE vulnerability in spring-beans before 5.2.20/5.3.18</title>
			<pubDate>Thu, 31 Mar 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#CVE-2022-22965-SpringShell-RCE-vulnerability-in-spring-beans-before-5.2.20/5.3.18</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#CVE-2022-22965-SpringShell-RCE-vulnerability-in-spring-beans-before-5.2.20/5.3.18_March_31_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751"&gt;CVE-2022-22965&lt;/a&gt; was reserved for a 0-day RCE vulnerability in &lt;code&gt;spring-beans&lt;/code&gt; as Spring team officially acknowledged the vulnerability and issued a fixed version for the currently known exploit. Scan your applications with Snyk to find out if you are vulnerable and mitigate by upgrading Spring to the latest version.&lt;/p&gt;
&lt;p&gt;All Snyk projects are being re-tested, but we recommend to re-test your projects actively to make sure the process is done. While there are several partial mitigations published online currently, we highly recommend upgrading to a fixed version to protect against this vulnerability.&lt;/p&gt;
&lt;p&gt;The Snyk Security team is continuously investigating the issue, as we expect further exploits and bypasses to show up. Please look for updates in our &lt;a href="https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751"&gt;advisory&lt;/a&gt; and on &lt;a href="https://snyk.io/blog/is-there-such-a-thing-as-spring4shell/"&gt;spring blog&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Credential format changes for Snyk Apps</title>
			<pubDate>Wed, 30 Mar 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Credential-format-changes-for-Snyk-Apps</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Credential-format-changes-for-Snyk-Apps_March_30_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved**, **open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The credential formats for &lt;strong&gt;Snyk Apps&lt;/strong&gt; have changed, to be recognizable and compatible with third-party secret scanning systems.&lt;/p&gt;
&lt;p&gt;Specifically, the format of &lt;strong&gt;client secrets&lt;/strong&gt; and &lt;strong&gt;refresh tokens&lt;/strong&gt; have changed. Both credential types now include a prefix (&lt;code&gt;snyk_&lt;/code&gt;) followed by an identifier (&lt;code&gt;cs_&lt;/code&gt; for client secrets, &lt;code&gt;rt_&lt;/code&gt; for refresh tokens) and a trailing version number (currently &lt;code&gt;_v1&lt;/code&gt;).&lt;/p&gt;
&lt;p&gt;To illustrate, the credential types adhere to the following &lt;em&gt;general form&lt;/em&gt;:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;For &lt;strong&gt;refresh tokens&lt;/strong&gt;: &lt;code&gt;^snyk_rt_.+_v1$&lt;/code&gt; (e.g. &lt;code&gt;snyk_rt_8R6aIT88713YlnZ5loA3rO5nFkzap0rs3miIPFb0J78_JOCRYo3olA5cubc5jYxy8R7xhf9m9cP8wwJ3FYy4Kis_v1&lt;/code&gt;)&lt;/li&gt;
&lt;li&gt;For &lt;strong&gt;client secrets&lt;/strong&gt;: &lt;code&gt;^snyk_cs_.+_v1$&lt;/code&gt; (e.g. &lt;code&gt;snyk_cs_FDals7bwaCdSIW_6sOaV92yQouJ8GlztpuBZLLpyEp80_v1&lt;/code&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Existing credentials will continue to work. To take advantage of the new client secret format, you will need to rotate the client secret for your Snyk App using &lt;a href="https://apidocs.snyk.io/?version=2022-03-11%7Eexperimental#post-/orgs/-org_id-/apps/-client_id-/secrets"&gt;the &lt;code&gt;POST /orgs/{org_id}/apps/{client_id}/secrets&lt;/code&gt; API endpoint&lt;/a&gt;, new refresh tokens will reflect the latest format automatically, you may exchange an existing refresh token for a new one using &lt;a href="https://snykoauth2.docs.apiary.io/#reference/apps/app-tokens/token-exchange-&amp;amp;-refresh"&gt;the &lt;code&gt;POST /oauth2/token&lt;/code&gt; API endpoint&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;You can learn more about Snyk Apps, currently available as an open beta, &lt;a href="https://docs.snyk.io/integrations/snyk-apps"&gt;here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Detect infrastructure drift and unmanaged resources in the Snyk CLI</title>
			<pubDate>Fri, 25 Mar 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Detect-infrastructure-drift-and-unmanaged-resources-in-the-Snyk-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Detect-infrastructure-drift-and-unmanaged-resources-in-the-Snyk-CLI_March_25_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Drift management for Snyk IaC is now available in beta &#127881;. You can now detect drift of cloud infrastructure and unmanaged resources in your cloud environments for Terraform (AWS, GCP, Azure).&lt;/p&gt;
&lt;p&gt;&lt;code&gt;snyk iac describe&lt;/code&gt; is the new CLI command available (starting with version 1.882.0) that produces a report of drifted resources and unmanaged resources.&lt;/p&gt;
&lt;p&gt;With the report, you can:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;ensure that the various desired states of cloud infrastructure actually match what's really running in the cloud environments.&lt;/li&gt;
&lt;li&gt;discover cloud resources that are not yet under Terraform management, or increase visibility about what changed since the last deployment, potentially introducing misconfigurations.&lt;/li&gt;
&lt;li&gt;bring resources under control, so they can be audited for misconfiguration by Snyk IaC, closing one more code-to-cloud lifecycle loop.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;For usage and constraints, please see the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/detect-drift-and-manually-created-resources"&gt;product documentation&lt;/a&gt;, an &lt;a href="https://snyk.io/blog/infrastructure-drift-detection-mitigation/"&gt;introduction blog post&lt;/a&gt; or the &lt;a href="https://docs.snyk.io/snyk-cli/commands/iac/iac-describe"&gt;Snyk CLI help&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Wizard and Snyk Protect removal</title>
			<pubDate>Wed, 02 Mar 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Wizard-and-Snyk-Protect-removal</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Wizard-and-Snyk-Protect-removal_March_2_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Starting from 31 March 2022, the &lt;code&gt;protect&lt;/code&gt; and &lt;code&gt;wizard&lt;/code&gt; commands in Snyk CLI will be removed and will not be available in future CLI versions.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;Why are we removing wizard and protect?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;Both &lt;code&gt;wizard&lt;/code&gt; and &lt;code&gt;protect&lt;/code&gt; are legacy commands that have better, well-documented alternatives available.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What should you do?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;We recommend you use &lt;a href="https://snyk.co/ueln8"&gt;snyk ignore&lt;/a&gt; instead of the &lt;code&gt;wizard&lt;/code&gt; command and use the &lt;a href="https://snyk.co/ueln7"&gt;@snyk/protect&lt;/a&gt; package instead of the &lt;code&gt;protect&lt;/code&gt; command.&lt;/p&gt;
&lt;p&gt;Alternatively, if you need to use &lt;code&gt;snyk wizard&lt;/code&gt; or &lt;code&gt;snyk protect&lt;/code&gt;, you will have to use any version of the CLI that was released before 31 March 2022.&lt;/p&gt;
&lt;p&gt;Snyk is here to help! If you encounter any issues or have any questions, please reach out to &lt;a href="https://support.snyk.io/hc/en-us"&gt;support&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk CLI standalone executables for Linux/arm64</title>
			<pubDate>Thu, 24 Feb 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-CLI-standalone-executables-for-Linux/arm64</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-CLI-standalone-executables-for-Linux/arm64_February_24_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;New&lt;/p&gt;
&lt;p&gt;Snyk CLI v1.851.0 and onwards now provides standalone executables for Linux running on arm64 architectures. You can download them from &lt;a href="https://github.com/snyk/snyk/releases"&gt;Snyk CLI&#8217;s GitHub Releases&lt;/a&gt; page.&lt;/p&gt;
&lt;p&gt;For more information on installing Snyk CLI, &lt;a href="https://docs.snyk.io/features/snyk-cli/install-the-snyk-cli"&gt;see our documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk IaC - Jira integration</title>
			<pubDate>Fri, 18 Feb 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-Jira-integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-Jira-integration_February_18_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now raise Jira tickets directly from Snyk IaC misconfiguration issues in the Snyk Platform.&lt;/p&gt;
&lt;p&gt;This feature is available on all paid plans and available to start using today.&lt;/p&gt;
&lt;p&gt;View the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/jira-integration"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Scan your C/C++ projects using Snyk CLI</title>
			<pubDate>Wed, 16 Feb 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Scan-your-C/C++-projects-using-Snyk-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Scan-your-C/C++-projects-using-Snyk-CLI_February_16_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Scanning of C and C++ projects for vulnerabilities is now available in beta. &lt;code&gt;snyk unmanaged test&lt;/code&gt; is a new CLI command that searches for C and C++ open source packages and their known vulnerabilities in your code.&lt;/p&gt;
&lt;p&gt;You can enable this feature from &lt;a href="https://app.snyk.io/manage/beta-features"&gt;Snyk Preview&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For usage, constraints, and known issues, &lt;a href="https://docs.snyk.io/products/snyk-open-source/language-and-package-manager-support/snyk-for-c-c++"&gt;view the documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;We would love to hear from you on how we can make this feature even better. Send us your feedback to &lt;a href="https://mailto:ccpp-beta@snyk.io"&gt;ccpp-beta@snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk IaC - Terraform AWS provider update</title>
			<pubDate>Wed, 16 Feb 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-Terraform-AWS-provider-update</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-IaC-Terraform-AWS-provider-update_February_16_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Infrastructure as Code now supports the new Terraform AWS v4.0 provider.&lt;/p&gt;
&lt;p&gt;With v4.0, the AWS Terraform provider changes how the S3 service is specified by dividing the configuration across several Terraform resources.&lt;/p&gt;
&lt;p&gt;The Snyk security rules for S3 have been updated to support both v3 and v4 of the AWS provider.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;If you have defined an instance of a S3 bucket in the same Terraform file, you will benefit from these changes automatically on your next scan.&lt;/li&gt;
&lt;li&gt;If you have spread your definition across multiple files, please see the &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/scan-terraform-files/terraform-aws-provider-support"&gt;documentation&lt;/a&gt; for more details.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Debian Severity Improvements - Upcoming Changes</title>
			<pubDate>Mon, 14 Feb 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Debian-Severity-Improvements-Upcoming-Changes</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Debian-Severity-Improvements-Upcoming-Changes_February_14_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We would like to let you know about upcoming changes to how we provide severity information for &lt;strong&gt;Debian vulnerabilities&lt;/strong&gt;.&lt;/p&gt;
&lt;p&gt;When Snyk determines the severity level (Low, Medium, High, Critical) of a Linux vulnerability for the Snyk Container product, we consider multiple factors:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Snyk's internal analysis.&lt;/li&gt;
&lt;li&gt;An assessment of the severity provided by the Linux distribution maintainer&#8217;s security team.&lt;/li&gt;
&lt;li&gt;The severity of the vulnerability as assessed by the National Vulnerability Database (NVD).&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;In certain cases, NVD may assign a different CVSS vector and severity score than the security maintainers of a particular Linux distribution. When this occurs, we prioritize and use the severity as determined by the Linux distribution maintainers as described in our relative importance feature. Specifically regarding Debian vulnerabilities, we take into account the "urgency" field. The change discussed here is that on top of the usage of this &#8220;urgency&#8221; field, we will now be taking into account if Debian marks a vulnerability as a &#8220;&lt;strong&gt;minor issue&lt;/strong&gt;&#8221;.&lt;/p&gt;
&lt;p&gt;This means that we will have an improved and more accurate calculation for Debian vulnerabilities&#8217; severity based on multiple factors of their &lt;a href="https://docs.snyk.io/products/snyk-container/snyk-container-security-basics/understanding-linux-vulnerability-severity"&gt;relative importance&lt;/a&gt;. Any future and existing issues that are marked as &#8220;minor issues&#8221; will be classified as &#8220;Low&#8221; severity issues.&lt;/p&gt;
&lt;p&gt;For example: In analyzing this vulnerability: &lt;a href="https://security.snyk.io/vuln/SNYK-DEBIAN11-GLIBC-2340922"&gt;SNYK-DEBIAN11-GLIBC-2340922&lt;/a&gt;, although NVD assigned the &lt;a href="https://nvd.nist.gov/vuln/detail/CVE-2022-23218"&gt;CVE-2022-23218&lt;/a&gt; a 9.8 score (Critical), the Debian Security Team concluded that this &lt;a href="https://security-tracker.debian.org/tracker/CVE-2022-23218"&gt;vulnerability&lt;/a&gt; is a minor issue for Debian users. In this case, we will rely on Debian's analysis, and it will be marked as a low severity vulnerability.&lt;/p&gt;
&lt;p&gt;Important notes:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;After this change, the previous severity data relevant to each vulnerability will no longer be accessible.&lt;/li&gt;
&lt;li&gt;Using the Reports feature, you might find that the number of Low issues is increasing, while other severities are decreasing.&lt;/li&gt;
&lt;li&gt;Due to the fact that the Priority Score is calculated also using the severity of a vulnerability, this score will vary accordingly.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The rollout will begin on &lt;strong&gt;February 15th&lt;/strong&gt;. After the change, a rescan is needed (either a manual test or a scheduled scan for monitored projects).&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code in Visual Studio</title>
			<pubDate>Tue, 18 Jan 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Snyk-Code-in-Visual-Studio</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Snyk-Code-in-Visual-Studio_January_18_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce that Snyk Code is now available in Visual Studio as well! You can scan your first party code and enjoy the blazingly fast Snyk Code scans using Snyk&#8217;s Visual Studio extension. The Visual Studio extension is available for Windows and supports &lt;a href="https://marketplace.visualstudio.com/items?itemName=snyk-security.snyk-vulnerability-scanner-vs"&gt;Visual Studio 2015, 2017, 2019&lt;/a&gt; and with a separate extension the &lt;a href="https://marketplace.visualstudio.com/items?itemName=snyk-security.snyk-vulnerability-scanner-vs-2022"&gt;latest 2022 version&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;You can easily install the Snyk extension by navigating to the marketplace or within the IDE itself just like any other Visual Studio extension. If you are using a previous version of the Snyk extension, Snyk Code is enabled through the extension settings.&lt;/p&gt;
&lt;p&gt;For further details, please have a look at the &lt;a href="https://docs.snyk.io/features/integrations/ide-tools/visual-studio-extension"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you have any issues, don't hesitate to reach out to &lt;a href="mailto:support@snyk.io"&gt;support@snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Ending Snyk CLI support for Node.js v10</title>
			<pubDate>Mon, 17 Jan 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Ending-Snyk-CLI-support-for-Node.js-v10</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Ending-Snyk-CLI-support-for-Node.js-v10_January_17_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;h4&gt;&lt;strong&gt;Starting from March 7, 2022, Snyk CLI will no longer support Node.js v10.&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;As a general security best practice, we recommend using runtime environments which are maintained and up-to-date. Node.js ended long-term support for Node.js v10 on April 2021. This means it has not been receiving bug fixes and security updates for close to a year.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What does this mean?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;Starting from the date stated above, using Snyk CLI npm installations with Node.js v10, either locally or as part of an automated build pipeline might fail in unexpected ways.&lt;/p&gt;
&lt;p&gt;If you are using our &lt;a href="https://github.com/snyk/snyk#install-as-a-part-of-a-snyk-cli-integration"&gt;official integrations&lt;/a&gt; or binary installations of Snyk CLI you will not be affected and do not need to take any action.&lt;/p&gt;
&lt;h4&gt;&lt;strong&gt;What should you do?&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;If you are affected by this change, we recommend upgrading Node.js to the current stable version, which is Node.js v16 as of writing. We do not recommend upgrading to Node.js v17 as odd numbered versions are not considered stable.&lt;/p&gt;
&lt;p&gt;Snyk is here to help! If you encounter any issues or have any questions, please reach out to support.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved scanning of Yarn workspaces in the CLI</title>
			<pubDate>Wed, 05 Jan 2022 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2022#Improved-scanning-of-Yarn-workspaces-in-the-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2022#Improved-scanning-of-Yarn-workspaces-in-the-CLI_January_5_2022</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have improved our Yarn support by automatically detecting and scanning Yarn workspaces, removing the need for multiple commands to be run! To get started simply grab our latest CLI version by running &lt;code&gt;npm i -g snyk&lt;/code&gt; before scanning your projects &#127881;&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://docs.snyk.io/products/snyk-open-source/language-and-package-manager-support/snyk-for-javascript#yarn-workspaces"&gt;Snyk for Javascript&lt;/a&gt; docs for more information.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved scanning of Java applications in Container images</title>
			<pubDate>Tue, 28 Dec 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Improved-scanning-of-Java-applications-in-Container-images</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Improved-scanning-of-Java-applications-in-Container-images_December_28_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce an improved scanning of Java applications in Snyk Container, allowing developers to find vulnerabilities in nested and shaded jars within their images.&lt;/p&gt;
&lt;p&gt;You can use one of the following to scan images using Snyk:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Using the &lt;code&gt;snyk container test/monitor --app-vulns&lt;/code&gt; command in the Snyk CLI&lt;/li&gt;
&lt;li&gt;Importing an image using a container registry&lt;/li&gt;
&lt;li&gt;Using the kubernetes integration When using one of the above, Snyk will find vulnerabilities in application dependencies from container images, as well as from operating systems.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;For Java applications, Snyk also scans one level of nested jars (including shaded jars) by default.&lt;/p&gt;
&lt;p&gt;For more information, check out &lt;a href="https://docs.snyk.io/products/snyk-container/getting-around-the-snyk-container-ui/detecting-application-vulnerabilities-in-container-images"&gt;Detecting application vulnerabilities in container images&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>CLI Log4Shell command</title>
			<pubDate>Sat, 18 Dec 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#CLI-Log4Shell-command</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#CLI-Log4Shell-command_December_18_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have enhanced the Snyk CLI with a new &lt;strong&gt;snyk log4shell&lt;/strong&gt; command that will give you more visibility into your application, including being able to find traces of the vulnerable library even if it&#8217;s not declared in the manifest file.&lt;/p&gt;
&lt;p&gt;The new command looks inside .jar and .war files to find Log4j or its parts. &#8220;Fat JARs&#8221; are supported as well.&lt;/p&gt;
&lt;p&gt;With &lt;strong&gt;snyk log4shell&lt;/strong&gt; you can scan a Java project to see if it includes:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;any .jar files with the vulnerable version of Log4j.&lt;/li&gt;
&lt;li&gt;any files known to be present in the vulnerable Log4j library. Such findings indicate that the whole Log4j library may be included.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Note&lt;/strong&gt;: The new command does not require (or support) any additional command-line arguments.&lt;/p&gt;
&lt;p&gt;For more details of using this command, see &lt;a href="https://snyk.io/blog/new-snyk-cli-command-finds-log4shell-in-unmanaged-undeclared-java-code/"&gt;Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://docs.snyk.io/features/snyk-cli"&gt;Snyk CLI docs&lt;/a&gt; for more information.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Special Log4j vulnerability notification in the CLI</title>
			<pubDate>Wed, 15 Dec 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Special-Log4j-vulnerability-notification-in-the-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Special-Log4j-vulnerability-notification-in-the-CLI_December_15_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have just released a new CLI version (&lt;a href="https://github.com/snyk/snyk/releases/tag/v1.792.0"&gt;v1.792.0&lt;/a&gt;), showing a special warning notification in the &lt;code&gt;snyk test&lt;/code&gt; output when the log4j vulnerability is found, to maximize your teams' awareness for vulnerable Log4j projects.&lt;/p&gt;
&lt;p&gt;This message includes a link to our &lt;a href="https://snyk.io/blog/log4shell-remediation-cheat-sheet/"&gt;Log4Shell remediation cheat sheet&lt;/a&gt; for additional info about remediation options.&lt;/p&gt;
&lt;p&gt;We highly recommend to encourage your teams to upgrade the CLI to the latest version so they get this extra messaging.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk's Cloud Platform all clear from Log4j exploits</title>
			<pubDate>Mon, 13 Dec 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk's-Cloud-Platform-all-clear-from-Log4j-exploits</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk's-Cloud-Platform-all-clear-from-Log4j-exploits_December_13_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk can confirm that within 24 hours of publishing &lt;a href="https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720"&gt;CVE-2021-44228&lt;/a&gt; in our vulnerability database all services that compose Snyk&#8217;s Cloud Platform running Apache&#8217;s vulnerable &lt;a href="https://logging.apache.org/log4j/2.x/"&gt;Log4j&lt;/a&gt; library have been patched to the latest version. We have not detected any successful attempts at exploitation of this attack vector during that time window.&lt;/p&gt;
&lt;p&gt;Snyk&#8217;s security response to events pertaining to the Log4j remote code execution vulnerability (RCE) is also strengthened by our defense in depth that leverages network-based firewalls, web application firewalls, anomaly detection with our platform environment, and is supplemented by our ongoing ISO/IEC 27001:2013 certification process and ISAE3402 SOC2 Type II annual report, available to customers on request.&lt;/p&gt;
&lt;p&gt;Today customers can also leverage the Snyk Platform to understand what steps they can take to ensure their services are also secure from &lt;a href="https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720"&gt;CVE-2021-44228&lt;/a&gt; and much more.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Log4j vulnerability notice</title>
			<pubDate>Mon, 13 Dec 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Log4j-vulnerability-notice</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Log4j-vulnerability-notice_December_13_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;On December 10, 2021, a new, critical &lt;a href="https://logging.apache.org/log4j/2.x/"&gt;Log4j&lt;/a&gt; vulnerability was disclosed: &lt;a href="https://techcrunch.com/2021/12/10/apple-icloud-twitter-and-minecraft-vulnerable-to-ubiquitous-zero-day-exploit/"&gt;Log4Shell&lt;/a&gt;. This vulnerability within the popular Java logging framework was published as &lt;a href="https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720"&gt;CVE-2021-44228&lt;/a&gt;, categorized as &lt;strong&gt;Critical&lt;/strong&gt; with a CVSS score of 10 (the highest score possible).&lt;/p&gt;
&lt;p&gt;All current versions of log4j2 up to 2.14.1 are vulnerable. You can remediate this vulnerability by updating to &lt;a href="https://logging.apache.org/log4j/2.x/download.html"&gt;version 2.15.0 or later&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Many application frameworks in the Java ecosystem use this logging framework by default. For instance, Apache Struts 2, Apache Solr, and Apache Druid are all affected. Aside from those, Apache log4j is also used in many Spring and Spring Boot applications, so we suggest you check your applications and update them to the latest version.&lt;/p&gt;
&lt;p&gt;Read more in our blog post: &lt;a href="https://snyk.io/blog/log4j-rce-log4shell-vulnerability-cve-2021-4428/"&gt;Log4j vulnerability disclosed: Prevent Log4Shell RCE by updating to version 2.15.0&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;Further reading: &lt;a href="https://snyk.io/blog/find-fix-log4shell-quickly-snyk/"&gt;Find and fix Log4Shell quickly with Snyk&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Container Security Data Improvements</title>
			<pubDate>Mon, 13 Dec 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Container-Security-Data-Improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Container-Security-Data-Improvements_December_13_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We would like to inform you about upcoming changes to how we provide security data and evaluate the severity of container vulnerabilities.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;CentOS Linux and CentOS Stream Updates&lt;/strong&gt;:&lt;/p&gt;
&lt;p&gt;As part of a continual effort to improve our container security data, we are changing how we provide information regarding CentOS Linux 6, 7 &amp;amp; 8 and CentOS Stream 8 vulnerabilities. Prior to these changes, we only provided information about CentOS through Red Hat Security Advisories (RHSA), which are collections of fixed CVEs. We are moving from presenting issues via RHSA, and instead will present them based on the individual CVEs, both fixed and unfixed.&lt;/p&gt;
&lt;p&gt;The following are some of the key features of this change:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Enhanced accuracy&lt;/strong&gt;: By showing individual CVEs instead of an RHSA, which may cover more than one CVE, you will have more details about each vulnerability that Snyk detects.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Broader coverage&lt;/strong&gt;: We will now show both fixed and unfixed CVEs, whereas the RHSA only shows fixed CVEs.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Enriched metadata&lt;/strong&gt;: Showing individual CVEs allows us to provide enriched vulnerability metadata on these CVEs, like Exploit Maturity, Social Trends and more.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Red Hat&#8217;s security analysis&lt;/strong&gt;: We will provide the severity of the issues as defined by the Red Hat Security Team, in addition to the severity determined by NVD, as part of the Relative Importance feature.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Important note: The number of issues will increase significantly as a result of the change, so you might see a change in the number of issues in the reports.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Red Hat CVSS score for Red Hat Enterprise Linux (RHEL) and CentOS&lt;/strong&gt;:&lt;/p&gt;
&lt;p&gt;For vulnerabilities that the Red Hat security team has evaluated and assigned a CVSS score, we are moving to use Red Hat's score as the default score we will present (when available) as it better reflects how a vulnerability affects their products.&lt;/p&gt;
&lt;p&gt;Important note: There may be some changes to existing vulnerabilities in your projects, such as moving CVSS score from 5.6 to 8.8.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Debian, Alpine, and Ubuntu Severity Updates&lt;/strong&gt;:&lt;/p&gt;
&lt;p&gt;We improved the way we evaluate risk for Debian, Alpine and Ubuntu vulnerabilities, by creating a smarter logic for combining the Linux source severity data and NVD severity data. In this on-going process to enhance accuracy, we are updating the severity of selected vulnerabilities.&lt;/p&gt;
&lt;p&gt;Important note: This means that there may be some changes to existing vulnerabilities in your projects, such as moving from Low severity to High severity.&lt;/p&gt;
&lt;p&gt;The rollout of the aforementioned changes will start on &lt;strong&gt;December 15th&lt;/strong&gt;. Once the new data will be available, the old data will not be available.&lt;/p&gt;
&lt;p&gt;After the change, retesting of the project is required (either a manual test or scheduled scanning for monitored projects).&lt;/p&gt;</description>
		</item>
		<item>
			<title>C/C++ Beta Support in Snyk Open Source</title>
			<pubDate>Wed, 08 Dec 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#C/C++-Beta-Support-in-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#C/C++-Beta-Support-in-Snyk-Open-Source_December_8_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to announce the beta of C/C++ support in Snyk Open Source! &#127881;&lt;/p&gt;
&lt;p&gt;With this new support, you can scan your C/C++ projects using the Snyk CLI to identify known vulnerabilities in the open source code you are using to build your applications.&lt;/p&gt;
&lt;p&gt;This is our first step towards supporting the scanning of unmanaged source code, without relying on package manifests. The &lt;code&gt;snyk unmanaged test&lt;/code&gt; in the Snyk CLI scans your source code for included open source dependencies and reports their vulnerabilities.&lt;/p&gt;
&lt;p&gt;Using the &lt;code&gt;snyk unmanaged monitor&lt;/code&gt; command, you can import the information about your dependencies into Snyk UI for reporting purposes. These capabilities are available, in beta, across all of Snyk's paid plans: Team, Business, and Enterprise. To join the beta, please drop us a note at &lt;a href="mailto:ccpp-beta@snyk.io"&gt;ccpp-beta@snyk.io&lt;/a&gt; so we can verify your specific use case is supported. More information about these capabilities and how to use them are available in our &lt;a href="https://docs.snyk.io/products/snyk-open-source/language-and-package-manager-support/snyk-for-c-c++"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Open Source in Visual Studio Code</title>
			<pubDate>Tue, 23 Nov 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Open-Source-in-Visual-Studio-Code</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Open-Source-in-Visual-Studio-Code_November_23_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce our new extension for Visual Studio Code, making it easier for developers to find and fix security issues as they code! Within seconds, the extension provides a list of all the different types of issues identified, in categories:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Open source security - known vulnerabilities in both the direct and in-direct (transitive) open source dependencies you are pulling into the project.&lt;/li&gt;
&lt;li&gt;Code Security - security weaknesses identified in your own code.&lt;/li&gt;
&lt;li&gt;Code Quality - code quality issues in your own code.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The extension is easy to install just like any other Visual Studio Code extension, directly from within your IDE or from the &lt;a href="https://marketplace.visualstudio.com/items?itemName=snyk-security.snyk-vulnerability-scanner"&gt;Visual Studio Code marketplace&lt;/a&gt;. Beneath the surface the powerful Snyk AI engine ensures both the speed of executed scans as well as the accuracy of results, guaranteeing an extremely fast feedback loop for developers.&lt;/p&gt;
&lt;p&gt;For further details, please have a look at the &lt;a href="https://docs.snyk.io/features/integrations/ide-tools/visual-studio-code-extension-for-snyk-code"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you have any issues, don't hesitate to reach out to &lt;a href="mailto:support@snyk.io"&gt;support@snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk IaC - Custom Rules</title>
			<pubDate>Mon, 22 Nov 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-IaC-Custom-Rules</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-IaC-Custom-Rules_November_22_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to announce the ability for users to write and execute their own security rules through the Snyk IaC product.&lt;/p&gt;
&lt;p&gt;This gives security and platform teams the power to enforce checks that are custom to your needs, such as tagging standards or using infrastructure in approved ways.&lt;/p&gt;
&lt;p&gt;Developers will receive combined feedback on their IaC configuration status, powered by both the Snyk provided and custom rules added by you.&lt;/p&gt;
&lt;p&gt;For more information and how to get started check out the blog post here &lt;a href="https://snyk.io/blog/developing-custom-iac-rules-with-snyk-iac/"&gt;https://snyk.io/blog/developing-custom-iac-rules-with-snyk-iac/&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Automated fixes for vulnerabilities in .NET dependencies</title>
			<pubDate>Tue, 16 Nov 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Automated-fixes-for-vulnerabilities-in-.NET-dependencies</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Automated-fixes-for-vulnerabilities-in-.NET-dependencies_November_16_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce improved support for .NET applications in Snyk Open Source, allowing developers to fix vulnerabilities in dependencies with the help of actionable advice and automated pull requests &#127881;&lt;/p&gt;
&lt;p&gt;Snyk Open Source will now display actionable fix advice, trigger fix pull requests, and automatically test new pull requests in your repository.&lt;/p&gt;
&lt;p&gt;For more information, check out the &lt;a href="https://snyk.io/blog/automated-vulnerability-fixes-dot-net-dependencies"&gt;official announcement&lt;/a&gt; and &lt;a href="https://docs.snyk.io/products/snyk-open-source/language-and-package-manager-support/snyk-for-.net"&gt;Snyk for .NET&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Happy fixing!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk's SCM contributors count tool</title>
			<pubDate>Thu, 04 Nov 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk's-SCM-contributors-count-tool</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk's-SCM-contributors-count-tool_November_4_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Now improved and released, this tool can scan your Snyk account &lt;strong&gt;and/or&lt;/strong&gt; your SCM&#8217;s repos to get a unique committers count for the last 90 days with a breakdown of the repos and committers' details.&lt;/p&gt;
&lt;p&gt;For existing Snyk customers, use this tool to validate your license usage or to evaluate new usage for expanding your Snyk monitored repos.&lt;/p&gt;
&lt;p&gt;For onboarding customers, use this tool to get an estimate of the needed Snyk licenses or just to get a sense of what&#8217;s going on in your SCMs.&lt;/p&gt;
&lt;p&gt;For more details, &lt;a href="https://docs.snyk.io/features/other-tools/snyk-scm-contributors-count-cli-tool"&gt;see our user docs&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://github.com/snyk-tech-services/snyk-scm-contributors-count"&gt;Download the tool here&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Maven accuracy improvements</title>
			<pubDate>Mon, 25 Oct 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Maven-accuracy-improvements</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Maven-accuracy-improvements_October_25_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are about to roll out a new version of our Maven dependency resolution mechanism &#127881;&lt;/p&gt;
&lt;p&gt;You can expect to see more accurate packages and versions in Maven projects imported from Git, for example when using frameworks such as Spring Boot and Jackson that use &lt;code&gt;dependencyManagement&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;Note that when the upgrade is applied you may find that more vulnerabilities are reported for your projects. This is because the new dependency graph contains more accurate versions, which can be older and more vulnerable than the previous results.&lt;/p&gt;
&lt;p&gt;This upgrade will be applied gradually to all Snyk organizations over the next few weeks.&lt;/p&gt;
&lt;p&gt;No action is required from yourself, the updated results will appear when your project's daily recurring tests are run.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Multiple branch / version support in the CLI</title>
			<pubDate>Thu, 21 Oct 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Multiple-branch-/-version-support-in-the-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Multiple-branch-/-version-support-in-the-CLI_October_21_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New**, **open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Sometimes your project might have multiple states which you want to monitor separately. These could be branches, releases, deployments and so on. We are happy to announce that you can now use &lt;code&gt;--target-reference&lt;/code&gt; to separate projects into these specific groupings, being able to monitor multiple instances of your project.&lt;/p&gt;
&lt;p&gt;To start using this feature, you&#8217;d need to update the CLI to the latest version and run the snyk monitor command with the &lt;code&gt;--target-reference&lt;/code&gt; option.&lt;/p&gt;
&lt;p&gt;For more information, please visit our &lt;a href="https://docs.snyk.io/features/snyk-cli/grouping-projects-by-branch-or-version"&gt;user documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Container Security Data Update to Red Hat Enterprise Linux (RHEL) and Amazon Linux</title>
			<pubDate>Wed, 13 Oct 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Container-Security-Data-Update-to-Red-Hat-Enterprise-Linux-(RHEL)-and-Amazon-Linux</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Container-Security-Data-Update-to-Red-Hat-Enterprise-Linux-(RHEL)-and-Amazon-Linux_October_13_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are changing the way we display vulnerabilities, from RHSA and ALAS to present issues based on the CVEs as part of an ongoing effort to improve our container security data.&lt;/p&gt;
&lt;p&gt;Prior to these changes, we have provided information only through Red Hat Security Advisory (RHSA) and Amazon Linux Security Advisories (ALAS), both of which are collections of fixed CVEs.&lt;/p&gt;
&lt;p&gt;The following are some of the key features of this change:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Enhanced accuracy by showing CVEs - Instead of presenting a consolidated single advisory, which may cover more than one CVE, we will now show each CVE separately. In addition, for Red Hat Enterprise Linux we will now show both fixed and unfixed CVEs, whereas the RHSA only shows fixed CVEs. For Amazon Linux, we will still only support fixed CVEs at this time.&amp;#x20;&lt;/li&gt;
&lt;li&gt;Showing individual CVEs allows us to provide enriched vulnerability metadata on these CVEs, like &lt;a href="https://docs.snyk.io/features/fixing-and-prioritizing-issues/issue-management/evaluating-and-prioritizing-vulnerabilities"&gt;Exploit Maturity&lt;/a&gt;, &lt;a href="https://docs.snyk.io/features/fixing-and-prioritizing-issues/prioritizing-issues/prioritize-by-social-trends"&gt;Social Trends&lt;/a&gt; and more.&lt;/li&gt;
&lt;li&gt;In addition, we will also provide the severity of the issues as evaluated by the Red Hat Security Team (Low, Moderate, Important, Critical), as part of the &lt;a href="https://docs.snyk.io/products/snyk-container/snyk-container-security-basics/understanding-linux-vulnerability-severity"&gt;Relative Importance&lt;/a&gt; feature.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Important notes:&amp;#x20;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Once the rollout is over, the old data will not be available.&lt;/li&gt;
&lt;li&gt;The number of issues might increase significantly as a result of the change. If you use the Reports function you may see a spike in issues.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Snyk Learn</title>
			<pubDate>Wed, 06 Oct 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Learn</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Learn_October_6_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;h4&gt;&lt;strong&gt;Snyk Learn: Developer-First Security Education&lt;/strong&gt;&lt;/h4&gt;
&lt;p&gt;We are excited to announce the release of Snyk Learn - an all-new free high-quality security education solution that puts developers in control of their own security education journey.&lt;/p&gt;
&lt;p&gt;With content that is natively integrated into the development workflow, and tailored for developers, Snyk Learn makes security education relevant, actionable and engaging.&lt;/p&gt;
&lt;p&gt;Learn something new today at &lt;a href="https://learn.snyk.io"&gt;learn.snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Apps</title>
			<pubDate>Wed, 06 Oct 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Apps</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Apps_October_6_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New, Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;We&#8217;re excited to announce the open beta of Snyk Apps - new extensibility points that enable you to expand the Snyk platform to easily integrate into your specific workflows!&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;Snyk Apps turn integrations into first-class citizens of the Snyk platform and as such, have the following characteristics:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Snyk Apps are easy to build and use with a great UX for both authors and end users provisioning them.&lt;/li&gt;
&lt;li&gt;Snyk Apps are based on the Snyk API. This means that integrations are inherently more stable and safer to use than before. A Snyk app will not, for example, break when a user accidentally deletes their personal API key!&lt;/li&gt;
&lt;li&gt;Snyk Apps are more secure. Implementing OAuth 2.0, they have granular permissions that you define so they only get access to what they need.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;We&#8217;d love to invite our users to build their own app!&lt;/p&gt;
&lt;p&gt;&lt;em&gt;More details on Snyk Apps and how to get started can be found in our&lt;/em&gt; &lt;a href="https://docs.snyk.io/integrations/snyk-apps"&gt;&lt;em&gt;documentation&lt;/em&gt;&lt;/a&gt;&lt;em&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&#128105;&#8205;&#128295; Happy building!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Planned downtime on Sunday 3rd October</title>
			<pubDate>Thu, 30 Sep 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Planned-downtime-on-Sunday-3rd-October</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Planned-downtime-on-Sunday-3rd-October_September_30_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are making some small changes to our production databases in preparation for a planned upgrade of them later this year. This requires bringing our databases off line for 15-30 minutes.&lt;/p&gt;
&lt;p&gt;On Sunday 3rd October 2021, Snyk production will be unavailable:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Beginning &lt;strong&gt;2pm UTC&lt;/strong&gt;.&lt;/li&gt;
&lt;li&gt;We expect production to be up and running before &lt;strong&gt;2:30pm UTC&lt;/strong&gt;.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;We apologise for any impact this may cause.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Reachable Vulnerabilities for GitHub Java projects</title>
			<pubDate>Mon, 27 Sep 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Reachable-Vulnerabilities-for-GitHub-Java-projects</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Reachable-Vulnerabilities-for-GitHub-Java-projects_September_27_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Open Source now supports &lt;a href="https://docs.snyk.io/fixing-and-prioritizing-issues/prioritizing-issues/reachable-vulnerabilities"&gt;reachable vulnerabilities analysis&lt;/a&gt; for Maven and Gradle projects imported from GitHub.&lt;/p&gt;
&lt;p&gt;Snyk will display any path found from your code to the vulnerable functions of each issue. You can filter for reachable vulnerabilities in Reports and the Project Issues, and they are also factored into Priority Scores.&lt;/p&gt;
&lt;p&gt;This feature is powered by the semantic code analysis capabilities of Snyk Code (no separate subscription required), and requires Snyk to temporarily clone your repository.&lt;/p&gt;
&lt;p&gt;You can opt-in by visiting Settings &amp;gt; Languages &amp;gt; Reachable Vulnerabilities.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New Docs and Support Portals</title>
			<pubDate>Wed, 15 Sep 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#New-Docs-and-Support-Portals</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#New-Docs-and-Support-Portals_September_15_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce a new, dedicated &lt;a href="https://docs.snyk.io/"&gt;Docs Portal&lt;/a&gt; for Snyk user documentation, to give you better and clearer access to our user docs, with enhanced navigation, and integration with learning and solutions documentation.&lt;/p&gt;
&lt;p&gt;We&#8217;ve also revamped our &lt;a href="https://support.snyk.io/hc/en-us"&gt;Support Portal&lt;/a&gt;, to allow quicker and better access to all Snyk KnowledgeBase articles.&lt;/p&gt;
&lt;p&gt;We&#8217;ll continue to invest in User Content, including increased functionality and quality improvements, to help you access the knowledge you need to use Snyk.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Smaller and faster CLI!</title>
			<pubDate>Mon, 06 Sep 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Smaller-and-faster-CLI!</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Smaller-and-faster-CLI!_September_6_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're happy to announce that we've released a new version of Snyk CLI which is much smaller and faster &#127939;&#8205;&#9792;&#65039;&lt;/p&gt;
&lt;p&gt;New CLI releases are now using Webpack to bundle dependencies into a single package. This greatly reduces its overall download size and makes npm installations almost instant.&lt;/p&gt;
&lt;p&gt;Our binary releases are now also compressed, dropping download sizes by a over 50%. Along with savings made by bundling, our binaries went from a whopping \~90MB to \~40MB.&lt;/p&gt;
&lt;p&gt;These changes will greatly improve the speed and reliability of Snyk CLI both on your workstations and in your CI/CD pipelines.&lt;/p&gt;
&lt;p&gt;To try out the new version, please update your Snyk CLI installation to use the latest version.&lt;/p&gt;
&lt;p&gt;For more information, please visit the &lt;a href="https://github.com/snyk/snyk#install-snyk-cli"&gt;CLI repo page&lt;/a&gt; on GitHub or visit our &lt;a href="https://support.snyk.io/hc/en-us/articles/360003812538-Install-the-Snyk-CLI"&gt;user documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Identifying malicious packages</title>
			<pubDate>Tue, 31 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Identifying-malicious-packages</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Identifying-malicious-packages_August_31_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk now factors whether a vulnerability originates from a malicious package or not into Snyk&#8217;s Priority Score, helping you find, prioritize and fix these issues more efficiently. Snyk will also add a warning on the relevant issue card itself to ensure maximum visibility.&lt;/p&gt;
&lt;p&gt;More and more software supply chain attacks are leveraging open source packages to spread malicious code. Continue using open source but stay vigilant!&lt;/p&gt;
&lt;p&gt;For more details, please see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360009884837-Snyk-Priority-Score"&gt;Snyk Priority Score docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Debian 11 stable and Debian 12 testing support</title>
			<pubDate>Wed, 18 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Debian-11-stable-and-Debian-12-testing-support</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Debian-11-stable-and-Debian-12-testing-support_August_18_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that Snyk Container now supports the new Debian 12 (&#8220;bookworm&#8221;) work-in-progress testing release.&lt;/p&gt;
&lt;p&gt;In addition, Snyk has been supporting the testing releases of Debian 11 (&#8220;bullseye&#8221;) for the past two years, which has now become the new stable Debian 11 release.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://support.snyk.io/hc/en-us/articles/360017545417-Supported-operating-system-distributions"&gt;documentation&lt;/a&gt; for more details about supported distributions.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Ignore Snyk IaC issues via the CLI</title>
			<pubDate>Tue, 17 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Ignore-Snyk-IaC-issues-via-the-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Ignore-Snyk-IaC-issues-via-the-CLI_August_17_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We've just added the ability to ignore Snyk Infrastructure as Code issues via the CLI.&lt;/p&gt;
&lt;p&gt;Using the CLI is a common pattern during development of your infrastructure, either running scans locally or as part of your CI/CD pipelines.&lt;/p&gt;
&lt;p&gt;You can use the .snyk file to ignore any issues that are not relevant to your deployment, and have these stored as part of your repository to be picked up automatically in any future CLI scans.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://support.snyk.io/hc/en-us/articles/4405381463313-IaC-ignores-using-the-snyk-policy-file"&gt;user documentation&lt;/a&gt; to get started.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Auto detect container base images</title>
			<pubDate>Tue, 17 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Auto-detect-container-base-images</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Auto-detect-container-base-images_August_17_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to announce that the Snyk Container product can now auto detect the base image that you are using and provide recommendations to upgrade to.&lt;/p&gt;
&lt;p&gt;This enables you to get remediation advice for the base image, by scanning your container image through the CLI or importing from a container registry.&lt;/p&gt;
&lt;p&gt;This means you can now get the same remediation advice without needing to provide the Dockerfile enabling you to easily get vulnerability information from your first scan.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://support.snyk.io/hc/en-us/articles/4405540674577-Base-image-detection"&gt;user documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Security policies: Ignore action, and CVE and Snyk ID conditions</title>
			<pubDate>Wed, 11 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Security-policies-Ignore-action,-and-CVE-and-Snyk-ID-conditions</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Security-policies-Ignore-action,-and-CVE-and-Snyk-ID-conditions_August_11_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;ve just added a new &lt;a href="https://support.snyk.io/hc/en-us/articles/360014571438-Security-policies-Actions"&gt;action&lt;/a&gt; (ignore) and two new &lt;a href="https://support.snyk.io/hc/en-us/articles/360014476597-Security-policies-Conditions"&gt;conditions&lt;/a&gt; (CVE and Snyk ID) to Security Policies.&lt;/p&gt;
&lt;p&gt;These new capabilities make it possible to automatically ignore issues based on their CVE, CWE, Snyk ID or exploit maturity, so you can triage your backlog more efficiently.&lt;/p&gt;
&lt;p&gt;More information about these new capabilities can be found &lt;a href="https://snyk.io/blog/snyk-security-policies/"&gt;on our blog&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://docs.snyk.io/features/fixing-and-prioritizing-issues/security-policies"&gt;user documentation&lt;/a&gt; for more details of security policies.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Jenkins plugin V3</title>
			<pubDate>Wed, 11 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Jenkins-plugin-V3</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Jenkins-plugin-V3_August_11_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Happy to announce that we&#8217;ve released a new major version of the Jenkins plugin &#127881;&lt;/p&gt;
&lt;p&gt;The new version supports new functionally and introduces significant improvements to the developer experience.&lt;/p&gt;
&lt;p&gt;Here is a list of the main improvements:&lt;/p&gt;
&lt;h4&gt;Improved performance&lt;/h4&gt;
&lt;p&gt;Snyk installations are now downloaded from our CDN, e.g. static.snyk.io instead of github.com which decreases the installation time and improves the overall plugin performance.&lt;/p&gt;
&lt;h4&gt;Improved error handling and status reporting&lt;/h4&gt;
&lt;p&gt;Added a new option to not fail the step on errors such as failed installs or bad configuration and improved the failure logic so a failing test runs would fail only the current step rather than the entire build.&lt;/p&gt;
&lt;h4&gt;Credential Binding support&lt;/h4&gt;
&lt;p&gt;SNYK_TOKEN can now be provided as build environment variable, allowing users to use injected secrets and integrate credential vaults.&lt;/p&gt;
&lt;h4&gt;Multiple report support&lt;/h4&gt;
&lt;p&gt;HTML reports now use a date and time or their name, allowing users to run Snyk multiple times in a build to generate multiple reports&lt;/p&gt;
&lt;h4&gt;Improved documentation&lt;/h4&gt;
&lt;p&gt;Improved explanation on how the plugin works and usage instructions.&lt;/p&gt;
&lt;h4&gt;Other improvements and bug fixes&lt;/h4&gt;
&lt;ul&gt;
&lt;li&gt;Increased minimum supported Jenkins version to 2.222.4&lt;/li&gt;
&lt;li&gt;Increased minimum supported Snyk CLI version to 1.500.0&lt;/li&gt;
&lt;li&gt;NodeJS and NPM installations are no longer required to run the step, though you may still need them to test your NodeJS-specific projects&lt;/li&gt;
&lt;li&gt;All Monitor and stderr output are now forwarded to Console Output and *.debug files are no longer generated&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;For more info on how to install and use the plugin, see the instructions in the &lt;a href="https://github.com/jenkinsci/snyk-security-scanner-plugin"&gt;plugin's public repo page&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code Priority Score</title>
			<pubDate>Wed, 04 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Code-Priority-Score</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Code-Priority-Score_August_4_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce that Snyk Code now supports Priority Scores, allowing you to filter and prioritize issues in your Snyk Code projects.&lt;/p&gt;
&lt;p&gt;As Snyk Code only includes one project per repo, with potentially thousands of files in the project, you may see a very large list of issues. Assigning Priority Scores to each issue allows you to focus on fixing the most important issues.&lt;/p&gt;
&lt;p&gt;Priority scores appear in the same way as for other Snyk products, allowing you to use all Snyk products in a similar manner to review and prioritize issues.&lt;/p&gt;
&lt;p&gt;For more information, see &lt;a href="https://support.snyk.io/hc/en-us/articles/360009884837-Snyk-Priority-Score"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code support for C\#</title>
			<pubDate>Tue, 03 Aug 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Code-support-for-C</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Code-support-for-C_August_3_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce that C# is now fully supported in Snyk Code, adding to existing Snyk Code support for JavaScript, TypeScript, Python and Java.&lt;/p&gt;
&lt;p&gt;C# is the most prominent of the .NET framework languages, and frequently used to write web or enterprise applications. Snyk Code now supports C# and common frameworks such as .NET and .NET Core as well as ASP.NET and ASP.NET Core.&lt;/p&gt;
&lt;p&gt;Existing projects will automatically use the new knowledge base when automatic rescan is performed. You can also trigger a rescan for immediate results.&lt;/p&gt;
&lt;p&gt;We are working hard to add Snyk Code support for more languages in the coming months.&lt;/p&gt;
&lt;p&gt;For more information:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;See this &lt;a href="https://snyk.io/blog/snyk-code-security-scanning-c-sharp-dot-net/"&gt;blog article&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;See the &lt;a href="https://docs.snyk.io/products/snyk-code/snyk-code-language-and-framework-support"&gt;product documentation&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Social Trends</title>
			<pubDate>Wed, 28 Jul 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Social-Trends</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Social-Trends_July_28_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the availability of Social Trends, adding Social Media Intelligence (SOCMINT) to our vulnerability data to help you prioritize vulnerabilities more effectively!&lt;/p&gt;
&lt;p&gt;A significant number of vulnerabilities are discussed on social media platforms like Twitter, Reddit, and Discord. Snyk&#8217;s Security Research team has found a strong correlation between activity around vulnerabilities in Twitter and the likelihood that those vulnerabilities will be exploited. Since these vulnerabilities pose a greater risk, we will now flag these vulnerabilities so you can prioritize fixing them in a timely fashion.&lt;/p&gt;
&lt;p&gt;Find out more about it in our latest &lt;a href="https://snyk.io/blog/social-media-for-security-intelligence/"&gt;blog post&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For more details, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/4404328187921-Prioritize-by-Social-Trends"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Manage Snyk users at scale</title>
			<pubDate>Mon, 26 Jul 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Manage-Snyk-users-at-scale</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Manage-Snyk-users-at-scale_July_26_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As your organization grows from dozens to hundreds (or even thousands) of users, it can become increasingly difficult to manage them. This can be anything from:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Finding a user or a group of users&lt;/li&gt;
&lt;li&gt;Understanding when they first joined Snyk&lt;/li&gt;
&lt;li&gt;Changing their roles&lt;/li&gt;
&lt;li&gt;Removing them from your organization&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;With that, it gives us great pleasure to announce that we redesigned the organization member management page within Snyk. You can perform all of the tasks you originally were able to, but we&#8217;ve added pagination, filtering, and search to improve the performance and usability of the page at scale. In addition, we&#8217;ve added sorting to the columns to allow you to organize your users as you need. For more information, please read the &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-users-and-permissions/manage-users-in-your-organizations"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Automatic remediation with snyk fix</title>
			<pubDate>Mon, 05 Jul 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Automatic-remediation-with-snyk-fix</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Automatic-remediation-with-snyk-fix_July_5_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;&lt;code&gt;snyk fix&lt;/code&gt; automatic remediation for Python projects is in beta &#127881;&lt;/p&gt;
&lt;p&gt;&lt;code&gt;snyk fix&lt;/code&gt; is a new CLI command that aims to automatically apply the recommended updates for supported ecosystems. Currently it is available for Poetry, Pip and Pipenv projects.&lt;/p&gt;
&lt;p&gt;To ensure minimum disruption to your existing workflows, we recommend trying the feature outside of your current automated CI runs until the feature is fully released.&lt;/p&gt;
&lt;p&gt;This can be done using &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-settings/snyk-preview"&gt;Snyk preview&lt;/a&gt; - a feature that enables you to preview new features before they are fully available within the Snyk Platform.&lt;/p&gt;
&lt;p&gt;To learn more about the new &lt;code&gt;snyk fix&lt;/code&gt; feature, see our &lt;a href="https://docs.snyk.io/features/snyk-cli/fix-vulnerabilities-from-the-cli/automatic-remediation-with-snyk-fix"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Critical Severity Level - Rollout Update</title>
			<pubDate>Mon, 28 Jun 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Critical-Severity-Level-Rollout-Update</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Critical-Severity-Level-Rollout-Update_June_28_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re happy to announce the introduction of &lt;strong&gt;Critical severity&lt;/strong&gt;!&lt;/p&gt;
&lt;p&gt;Starting today, and in accordance with CVSS v3.1 ratings, we will begin to assign the Critical severity level to any security vulnerability identified by Snyk Open Source and Snyk Container with a CVSS score higher than 9.0.&lt;/p&gt;
&lt;p&gt;This change will be gradually rolled out to all Snyk users, and once applied, will both reduce the number of High severity issues across your projects and affect automated CLI/API-based pipelines you have in place.&lt;/p&gt;
&lt;p&gt;Please read the &lt;a href="https://support.snyk.io/hc/en-us/articles/360020021058-Critical-severity-migration"&gt;migration guide&lt;/a&gt; to fully understand the change.&lt;/p&gt;
&lt;p&gt;If you do not see Critical severity enabled for your projects yet, you can enable it yourself on the &lt;strong&gt;Settings &#8594; Snyk Preview&lt;/strong&gt; page.&lt;/p&gt;
&lt;p&gt;In case of questions, feel free to reach out to the Snyk Support team: support@snyk.io.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk supports npm 7</title>
			<pubDate>Fri, 25 Jun 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-supports-npm-7</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-supports-npm-7_June_25_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce that Snyk now supports the newest release from npm - 7 &#127881;&lt;/p&gt;
&lt;p&gt;This is supported in both the CLI and Git imported projects.&lt;/p&gt;
&lt;p&gt;For more details, please refer to the &lt;a href="https://support.snyk.io/hc/en-us/articles/360004712477-Snyk-for-JavaScript"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Fix advice for Poetry</title>
			<pubDate>Thu, 24 Jun 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Fix-advice-for-Poetry</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Fix-advice-for-Poetry_June_24_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce that Snyk now provides actionable fix advice for Poetry projects &#127881;&lt;/p&gt;
&lt;p&gt;This provides you with the simplest options to fix the greatest number of issues in your project. This is available in the CLI and UI.&lt;/p&gt;
&lt;p&gt;See the &lt;a href="https://support.snyk.io/hc/en-us/articles/360004699377-Snyk-for-Python"&gt;Poetry documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved site header</title>
			<pubDate>Fri, 18 Jun 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Improved-site-header</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Improved-site-header_June_18_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As part of our continuous improvements, we've rebuilt our site header to be easier to use across all devices, as well as being faster to navigate between key pages such as the dashboard and projects page.&lt;/p&gt;
&lt;p&gt;Please note that organization and group settings have moved, from the main navigation &lt;strong&gt;Settings&lt;/strong&gt; menu, to a cog icon &lt;img alt="cog icon.png" src="https://cloud.headwayapp.co/changelogs_images/images/big/000/069/915-721a4bb9febdec4f03a392ac65aff03d8e48e7d2.png" /&gt; on the right side of the site header.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Scan CloudFormation files for configuration issues</title>
			<pubDate>Thu, 17 Jun 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Scan-CloudFormation-files-for-configuration-issues</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Scan-CloudFormation-files-for-configuration-issues_June_17_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to announce the launch of CloudFormation support within the Snyk IaC product.&lt;/p&gt;
&lt;p&gt;You can now scan your AWS CloudFormation configuration templates against our comprehensive set of security rules and get actionable advice on how to resolve any configuration issues.&lt;/p&gt;
&lt;p&gt;You can get started today by either importing a git repository containing your CloudFormation files or by using the &lt;a href="https://support.snyk.io/hc/en-us/articles/360020748897-Test-your-CloudFormation-files-with-our-CLI-tool"&gt;Snyk IaC CLI&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://docs.snyk.io/products/snyk-infrastructure-as-code/scan-cloudformation-files"&gt;product documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Visual Studio plugin for Snyk Open Source</title>
			<pubDate>Wed, 09 Jun 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Visual-Studio-plugin-for-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Visual-Studio-plugin-for-Snyk-Open-Source_June_9_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce our new Snyk Open Source plugin for Visual Studio! Supporting Visual Studio 2015, 2017, and 2019, the new plugin enables developers to easily find and fix both known vulnerabilities and license issues in their open source dependencies, helping them address security early on and ship secure code faster.&lt;/p&gt;
&lt;p&gt;For further details, please have a look at the &lt;a href="https://support.snyk.io/hc/en-us/articles/360020073958-Visual-Studio-extension"&gt;product documentation&lt;/a&gt; or go straight to the &lt;a href="https://marketplace.visualstudio.com/items?itemName=snyk-security.snyk-vulnerability-scanner-vs"&gt;marketplace&lt;/a&gt; and install it.&lt;/p&gt;
&lt;p&gt;In case of any issues, feel free to reach out to: support@snyk.io.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk integrates with AWS CodePipeline</title>
			<pubDate>Tue, 08 Jun 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-integrates-with-AWS-CodePipeline</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-integrates-with-AWS-CodePipeline_June_8_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to announce the release of Snyk for AWS CodePipeline! This integration provides seamless scanning and results of any found vulnerabilities inside the AWS Console.&lt;/p&gt;
&lt;p&gt;You can now scan source artifacts from AWS CodeCommit or any other supported SCM by adding Snyk as a stage in your pipeline with a few simple clicks.&lt;/p&gt;
&lt;p&gt;This new integration is available to all customers in our free plan and comes with 200 scans per month. If you need more scans, you can also upgrade to our paid plans via the &lt;a href="https://aws.amazon.com/marketplace/pp/prodview-gdkas64v7dops?ref_=beagle\&amp;amp;applicationId=AWSMPContessa"&gt;AWS Marketplace&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;With a built-in configuration page, you can customize the integration to fail builds when vulnerabilities are found. Reducing risk and improving your security posture.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://support.snyk.io/hc/en-us/articles/4402158184081-AWS-CodePipeline-integration"&gt;product documentation&lt;/a&gt; for more information.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Critical Severity Level</title>
			<pubDate>Sun, 23 May 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Critical-Severity-Level</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Critical-Severity-Level_May_23_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Starting on June 28, and in accordance with CVSS v3 ratings, we will assign the &lt;strong&gt;Critical Severity Level&lt;/strong&gt; to any security vulnerability identified by Snyk Open Source and Snyk Container with a CVSS score higher than 9.0.&lt;/p&gt;
&lt;p&gt;What does this mean for you? First, this change will likely reduce the number of High Severity issues across your projects as some of these issues will now be assigned a Critical Severity level. Second, this change affects automated CLI/API-based pipelines.&lt;/p&gt;
&lt;p&gt;To ensure minimum disruption to your existing workflows, we recommend enabling the feature in advance of the stated date above. This can be done using &lt;a href="https://docs.snyk.io/features/user-and-group-management/managing-settings/snyk-preview"&gt;Snyk Preview&lt;/a&gt; - a feature that enables you to preview new features before they are fully available within the Snyk Platform.&lt;/p&gt;
&lt;p&gt;Please read the &lt;a href="https://support.snyk.io/hc/en-us/articles/360020021058-Critical-severity-migration"&gt;migration guide&lt;/a&gt; to fully understand the change and how it affects the way you are working in Snyk.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://snyk.io/blog/early-access-to-snyk-features-snyk-preview/"&gt;blog post&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk IaC CLI - Terraform Plan Scanning</title>
			<pubDate>Thu, 13 May 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-IaC-CLI-Terraform-Plan-Scanning</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-IaC-CLI-Terraform-Plan-Scanning_May_13_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to announce the release of the new Snyk Infrastructure as Code CLI which provides powerful new Terraform scanning capabilities.&lt;/p&gt;
&lt;p&gt;You can scan your Terraform Plan configuration enabling you to get comprehensive security feedback of all infrastructure changes, including any modules and variables that you are using.&lt;/p&gt;
&lt;p&gt;We've made performance and security improvements, with all scanning happening locally within the CLI and 20x faster than before. This applies to all configuration formats, including Terraform &amp;amp; Kubernetes.&lt;/p&gt;
&lt;p&gt;Upgrade to version &lt;code&gt;1.594.0&lt;/code&gt; or newer of the CLI now to try out this functionality.&lt;/p&gt;
&lt;p&gt;Snyk IaC is available for free with a monthly scan limit of 300 tests.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://snyk.io/blog/prevent-cloud-misconfigurations-hashicorp-terraform-snyk-iac/"&gt;launch blog post&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Code available on Free Plans</title>
			<pubDate>Thu, 13 May 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Code-available-on-Free-Plans</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Code-available-on-Free-Plans_May_13_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very happy to announce Snyk Code is now available for all customers as part of our free plan &#127881;.&lt;/p&gt;
&lt;p&gt;The AI-driven static application security testing (SAST) solution Snyk Code provides real-time accurate suggestions for your code - in JavaScript, TypeScript, Java, or Python.&lt;/p&gt;
&lt;p&gt;Every user has 100 free scans per month. You just need to enable Snyk Code in the org settings and re-import the projects you want scanned.&lt;/p&gt;
&lt;p&gt;The results are in the web UI or you can use the IDE plugin for IntelliJ or WebStorm/IDE extension in Visual Studio Code.&lt;/p&gt;
&lt;p&gt;It is easy to try, just activate and import an open-source repo of your choice.&lt;/p&gt;
&lt;p&gt;See our &lt;a href="https://docs.snyk.io/products/snyk-code"&gt;Snyk Code documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>GitHub Code Scanning Support for Snyk Open Source</title>
			<pubDate>Thu, 29 Apr 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#GitHub-Code-Scanning-Support-for-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#GitHub-Code-Scanning-Support-for-Snyk-Open-Source_April_29_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce that Snyk's GitHub Actions now support showing open source vulnerabilities within the GitHub security tab, leveraging the GitHub's new Code Scanning interface! This addition will allow you to automatically scan your open source dependencies for security vulnerabilities and license issues, and view results directly from within GitHub&#8217;s Security tab!&lt;/p&gt;
&lt;p&gt;For more details and usage instruction, see &lt;a href="https://github.com/snyk/actions#github-code-scanning-support"&gt;this section&lt;/a&gt; in the Snyk Actions repository.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk supports Ubuntu 21.04</title>
			<pubDate>Wed, 28 Apr 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-supports-Ubuntu-21.04</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-supports-Ubuntu-21.04_April_28_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to update that Snyk now supports the newest release from Ubuntu - 21.04&lt;/p&gt;
&lt;p&gt;For more details, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360017545417-Supported-operating-system-distributions"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk for Elixir</title>
			<pubDate>Mon, 19 Apr 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-for-Elixir</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-for-Elixir_April_19_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very happy to announce that the Snyk CLI now supports testing Elixir projects &#127881;&lt;/p&gt;
&lt;p&gt;You can now test and monitor your &lt;a href="https://hexdocs.pm/mix/Mix.html"&gt;Mix&lt;/a&gt;/&lt;a href="https://hex.pm/"&gt;Hex&lt;/a&gt; projects for vulnerabilities, with full support for umbrella projects, Elixir &amp;amp; Erlang dependencies.&lt;/p&gt;
&lt;p&gt;CLI support for Elixir is available from version 1.561.0, &lt;a href="https://support.snyk.io/hc/en-us/articles/360019360597-Snyk-for-Elixir"&gt;see the documentation for more details&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>A JetBrains plugin for Snyk Code and Snyk Open Source</title>
			<pubDate>Wed, 07 Apr 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#A-JetBrains-plugin-for-Snyk-Code-and-Snyk-Open-Source</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#A-JetBrains-plugin-for-Snyk-Code-and-Snyk-Open-Source_April_7_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce our &lt;a href="https://plugins.jetbrains.com/plugin/10972-snyk-vulnerability-scanner"&gt;new plugin for JetBrains IDEs&lt;/a&gt;, making it easier for developers to find and fix security issues as they code! Within seconds, the plugin provides a list of all the different types of issues identified, in three categories:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Open source security&lt;/strong&gt; - known vulnerabilities in both the direct and in-direct (transitive) open source dependencies you are pulling into the project.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Code Security&lt;/strong&gt; - security weaknesses identified in your own code.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Code Quality&lt;/strong&gt; - code quality issues in your own code.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The plugin is easy to install just like any other JetBrains plugin, directly from within your IDE or from the &lt;a href="https://plugins.jetbrains.com/plugin/10972-snyk-vulnerability-scanner"&gt;JetBrains marketplace&lt;/a&gt;. Beneath the surface the powerful Snyk AI engine ensures both the speed of executed scans as well as the accuracy of results, guaranteeing an extremely fast feedback loop for developers.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Oh, and did we mention the plugin is totally free?!&lt;/strong&gt; Any Snyk user using JetBrains IntelliJ and WebStorm can download the plugin and start scanning the code for issues, including free users. &#128640;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;You can install the plugin from the marketplace or click &lt;a href="https://support.snyk.io/hc/en-us/articles/360004032317-JetBrains-IDE-Plugins"&gt;here&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;For further details, please have a look at the &lt;a href="https://support.snyk.io/hc/en-us/articles/360004032317-JetBrains-IDE-Plugins"&gt;product documentation&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;If you have any issues please reach out to support@snyk.io.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>More granular policies with Project attributes</title>
			<pubDate>Tue, 06 Apr 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#More-granular-policies-with-Project-attributes</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#More-granular-policies-with-Project-attributes_April_6_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce the general availability of project attribute policies, enabling security teams to create granular policies that align with the context of their applications. This gives more power and flexibility to our policies engine, allowing you even greater prioritization of issues.&lt;/p&gt;
&lt;p&gt;You can create project attribute policies for License policies and Security policies. Project attribute policies are available for Pro and Enterprise users.&lt;/p&gt;
&lt;p&gt;For more details, see the&lt;a href="https://docs.snyk.io/features/fixing-and-prioritizing-issues/policies/assign-a-policy-to-project-attributes"&gt; product documentation.&lt;/a&gt;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Maven Plugin V2.0 (CLI Based)</title>
			<pubDate>Wed, 31 Mar 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Maven-Plugin-V2.0-(CLI-Based)</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Maven-Plugin-V2.0-(CLI-Based)_March_31_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're happy to share that we just released a new Maven plugin version which is now based on the CLI! &#127881;&lt;/p&gt;
&lt;p&gt;As the new plugin is based on the CLI, all of the CLI options (args) are now available out-of-the-box from within the plugin and can be easily consumed as part of the Maven build process.&lt;/p&gt;
&lt;p&gt;This means that you can now customize the test and monitor runs by setting a custom severity threshold, failing only when there were vulnerabilities that can be fixed, generating json output and more.&lt;/p&gt;
&lt;p&gt;For more details and usage instructions, see the &lt;a href="https://github.com/snyk/snyk-maven-plugin"&gt;Snyk Maven Plugin repository&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Infrastructure as Code - Terraform Plan support in the CLI</title>
			<pubDate>Fri, 26 Mar 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-Terraform-Plan-support-in-the-CLI</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-Terraform-Plan-support-in-the-CLI_March_26_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Open beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;I'm pleased to announce we have released a public beta of new functionality in the Snyk IaC CLI in version &lt;code&gt;1.511.0&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;You can now scan your Terraform Plan output, which will include any variables &amp;amp; modules that you use, enabling us to detect a broader range of security misconfigurations.&lt;/p&gt;
&lt;p&gt;Additionally any configuration files that you scan (Terraform or Kubernetes) will be processed locally within the CLI and &lt;em&gt;not&lt;/em&gt; sent to Snyk for processing.&lt;/p&gt;
&lt;p&gt;This functionality is available in beta now and can be used by appending &lt;code&gt;--experimental&lt;/code&gt; to any Snyk IaC CLI command. For example &lt;code&gt;$ snyk iac test --experimental&lt;/code&gt; or to test a Terraform Plan file name your file &lt;code&gt;tf-plan.json&lt;/code&gt; and run &lt;code&gt;$ snyk iac test tf-plan.json --experimental&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;For more details, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360018728618-Test-your-configuration-files"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you have any issues please reach out to &lt;a href="mailto:support@snyk.io"&gt;support@snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Quay container registry integration</title>
			<pubDate>Thu, 18 Mar 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Quay-container-registry-integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Quay-container-registry-integration_March_18_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're happy to share that Quay container registry is now supported as part of our container integrations offering. Starting today, all Snyk users will be able to scan and fix vulnerabilities in their container images stored in Quay.&lt;/p&gt;
&lt;p&gt;To get started, configure Quay from our integrations page. If you're using a self-hosted Quay, contact us for a brokered setup. Otherwise, you can start setting it up yourself and import images.&lt;/p&gt;
&lt;p&gt;Once integrated, you can start adding images from Quay and test them for vulnerabilities.&lt;/p&gt;
&lt;p&gt;To learn more about Snyk integration with Quay, see our &lt;a href="https://support.snyk.io/hc/en-us/articles/360018445398-Container-security-with-Quay-integration"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Automatic fix pull requests for Dockerfiles</title>
			<pubDate>Wed, 17 Mar 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Automatic-fix-pull-requests-for-Dockerfiles</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Automatic-fix-pull-requests-for-Dockerfiles_March_17_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're thrilled to share that Snyk can now raise fix pull requests against your Dockerfiles!&lt;/p&gt;
&lt;p&gt;For every scanned Dockerfile that contains a base image for which we provide recommendations, we will raise an automatic fix PR in case there is a better base image that can be used. The PR will be opened with the minor upgrade available.&lt;/p&gt;
&lt;p&gt;After it is opened, the fix PR can be found in your Git repository, showing the FROM line changed in your Dockerfile, updated with the new and improved base image version.&lt;/p&gt;
&lt;p&gt;We also provide the option to manually open a fix PR and upgrade to any of the base image recommendations we provide (rather than just the minor version). This option is available using a button next to each one of the base images in the recommendations table.&lt;/p&gt;
&lt;p&gt;You can enable/disable the feature using the setting that can be found in the integration level.&lt;/p&gt;
&lt;p&gt;You can learn more about our automatic Dockerfile fix PR capability &lt;a href="https://snyk.io/blog/issuing-fix-prs-to-update-dockerfiles/"&gt;in our blog post&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For more details about opening PRs in your Dockerfile, see our &lt;a href="https://docs.snyk.io/products/snyk-container/scan-your-dockerfile/open-pull-requests-to-fix-vulnerable-base-images-in-your-dockerfile"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Harbor container registry integration</title>
			<pubDate>Mon, 15 Mar 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Harbor-container-registry-integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Harbor-container-registry-integration_March_15_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're happy to announce that &lt;strong&gt;Harbor&lt;/strong&gt; container registry is now supported as part of our container integrations offering.&lt;/p&gt;
&lt;p&gt;Starting today, &lt;strong&gt;Pro&lt;/strong&gt; and &lt;strong&gt;Enterprise&lt;/strong&gt; customers can test, fix and monitor vulnerabilities in their container images stored in Harbor.&lt;/p&gt;
&lt;p&gt;To get started, you can find Harbor in our integrations page. If you're using self-hosted Harbor, contact us for a brokered setup. Otherwise, you can start setting it up yourself and import images.&lt;/p&gt;
&lt;p&gt;Once integrated, you can start adding images from Harbor and test them for vulnerabilities.&lt;/p&gt;
&lt;p&gt;To learn more about Snyk integration with Harbor, see our &lt;a href="https://support.snyk.io/hc/en-us/articles/360018401678-Container-security-with-Harbor-integration"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New issue card design</title>
			<pubDate>Tue, 02 Mar 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#New-issue-card-design</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#New-issue-card-design_March_2_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;ve redesigned the issue card on the project page, to help developers understand what they need to fix something much quicker. This involves streamlining the header of the card to only contain key information required to fix issues. The other contextual information is still available in the card, but tucked away slightly so you can really focus on the critical information.&lt;/p&gt;
&lt;p&gt;We&#8217;ve also added an extra filter, and the ability to sort issues&lt;/p&gt;
&lt;p&gt;To see how we&#8217;ve made the issue card more concise and valuable, open any Snyk projects you have. For more information on the specific features within the issue card, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360018049037"&gt;product user documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Webhooks in Beta</title>
			<pubDate>Thu, 25 Feb 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Webhooks-in-Beta</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Webhooks-in-Beta_February_25_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Open Beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Custom webhooks are in beta &#127881;&lt;/p&gt;
&lt;p&gt;Subscribe to push events from Snyk! This new API functionality can be used to receive Snyk payloads in third-party systems (collaboration tools or incident management platforms) when a Snyk event is triggered, such as when a new vulnerability is identified.&lt;/p&gt;
&lt;p&gt;The first event you can subscribe to is &lt;strong&gt;project_snapshot&lt;/strong&gt;, which is triggered every time a project is scanned for vulnerabilities. New issues are included in the payload your webhook receives, along with the &lt;strong&gt;project&lt;/strong&gt;, &lt;strong&gt;org&lt;/strong&gt;, and &lt;strong&gt;group&lt;/strong&gt; for context.&lt;/p&gt;
&lt;p&gt;To learn more about the new webhooks feature, see our &lt;a href="https://snyk.docs.apiary.io/#reference/webhooks"&gt;API documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;&lt;em&gt;As a feature of the API, webhooks are available in Business and Enterprise plans.&lt;/em&gt;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Bug fix: Dependencies using dual/multiple licenses alignment</title>
			<pubDate>Mon, 22 Feb 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Bug-fix-Dependencies-using-dual/multiple-licenses-alignment</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Bug-fix-Dependencies-using-dual/multiple-licenses-alignment_February_22_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have released a bug fix to align the way license severities are resolved and displayed for dependencies using dual/multiple licenses.&lt;/p&gt;
&lt;p&gt;Previously, for these dependencies, the resolved license severity was not always displayed within the Snyk UI and exported CSV reports. Also, the API (Licenses, Licenses by organization, and List all licenses) response did not show when a certain dependency uses more than one license.&lt;/p&gt;
&lt;p&gt;This fix aligns Snyk&#8217;s license reporting, to show accurate license details across the UI, exported CSVs, and the API.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Infrastructure as Code - Reporting</title>
			<pubDate>Wed, 17 Feb 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-Reporting</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-Reporting_February_17_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;I'm pleased to announce that we have released reporting capabilities for the Snyk Infrastructure as Code (IaC) product as general availability.&lt;/p&gt;
&lt;p&gt;Any issues that are detected in your Kubernetes, Helm or Terraform files will now be included in the summary graphs and detailed breakdowns in the Snyk UI.&lt;/p&gt;
&lt;p&gt;The reporting data can be exported via CSV and is also accessible via the API.&lt;/p&gt;
&lt;p&gt;This functionality is only available to paid Snyk Infrastructure as Code customers.&lt;/p&gt;
&lt;p&gt;For more details, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360017495297-View-your-Infrastructure-as-Code-issues"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you have any issues please reach out to &lt;a href="mailto:support@snyk.io"&gt;support@snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk supports Alpine 3.13</title>
			<pubDate>Wed, 03 Feb 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-supports-Alpine-3.13</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-supports-Alpine-3.13_February_3_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce that Snyk now supports the newest release from Alpine - 3.13.&lt;/p&gt;
&lt;p&gt;For more details, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360017545417-Supported-operating-system-distributions"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Ending Snyk CLI support for Node.js 8.x</title>
			<pubDate>Mon, 25 Jan 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Ending-Snyk-CLI-support-for-Node.js-8.x</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Ending-Snyk-CLI-support-for-Node.js-8.x_January_25_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;None&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Starting from 15.02.2021, the Snyk CLI will no longer support Node.js 8.x.&lt;/p&gt;
&lt;p&gt;LTS support for this version expired at the end of 2019 and no longer receives security updates. We consider it a general security best practice to always use runtime environments that are more up-to-date.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;What does this mean?&lt;/strong&gt; Starting from the stated date above, using the latest version of the Snyk CLI (v. 1.437.4 and above) with Node.js 8.x, either locally or as part of an automated build pipeline, might fail.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;What should you do?&lt;/strong&gt; For optimized Snyk CLI operations, we recommend upgrading Node.js to the current stable version - version 14.x.&lt;/p&gt;
&lt;p&gt;The Snyk team is here to help! Feel free to reach out to support in case you encounter any issues or have any questions.&lt;/p&gt;
&lt;p&gt;See the &lt;a href="https://support.snyk.io/hc/en-us/articles/360003812458-Getting-started-with-the-CLI"&gt;product documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Infrastructure as Code - CLI Performance</title>
			<pubDate>Fri, 22 Jan 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-CLI-Performance</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-CLI-Performance_January_22_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;I'm pleased to announce that we have released a significant performance improvement to the Snyk CLI for scanning your Infrastructure as Code files.&lt;/p&gt;
&lt;p&gt;Handling large volumes of files is now performant and benchmarking shows that scanning 500 Terraform files takes &amp;lt; 20 seconds. To benefit from these improvements ensure you are using a CLI version &amp;gt; 1.438.0 and run &lt;code&gt;$ snyk iac test&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;If you have any issues please reach out to &lt;a href="mailto:support@snyk.io"&gt;support@snyk.io&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;See the &lt;a href="https://support.snyk.io/hc/en-us/articles/360013723877-Test-your-Terraform-files-with-our-CLI-tool"&gt;product documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Prioritize fixes more efficiently with Reachable Vulnerabilities for GitHub Java Maven projects</title>
			<pubDate>Thu, 21 Jan 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Prioritize-fixes-more-efficiently-with-Reachable-Vulnerabilities-for-GitHub-Java-Maven-projects</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Prioritize-fixes-more-efficiently-with-Reachable-Vulnerabilities-for-GitHub-Java-Maven-projects_January_21_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Open Beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to announce the availability of Reachable Vulnerabilities for GitHub Java Maven projects. Reachable Vulnerabilities analysis will take a deeper look into how your projects are using their open source dependencies, and how those open source dependencies interact with each other, identifying whether the vulnerable part of a dependency is indeed reached or not.&lt;/p&gt;
&lt;p&gt;The reachability analysis will provide your development and security teams with deep application-level context for vulnerabilities identified in GitHub-hosted applications, enabling them to prioritize fixes more efficiently.&lt;/p&gt;
&lt;p&gt;This feature is in open beta and we'll be gradually making it available to Snyk users over the upcoming weeks. If you can't wait and want to get access sooner, reach out to support@snyk.io.&lt;/p&gt;
&lt;p&gt;See the &lt;a href="https://support.snyk.io/hc/en-us/articles/360010554837-Reachable-Vulnerabilities-"&gt;product documentation&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Infrastructure as Code - Reporting</title>
			<pubDate>Mon, 18 Jan 2021 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-Reporting</link>
			<guid>https://snyk.gitbook.io/product-updates/2021#Snyk-Infrastructure-as-Code-Reporting_January_18_2021</guid>
			<description>&lt;p&gt;&lt;b&gt;Open Beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;I'm pleased to announce that we have launched reporting capabilities for the Snyk Infrastructure as Code (IaC) product. Any issues that are detected in your Kubernetes, Helm or Terraform files will now be included in the summary graphs and detailed breakdowns in the Snyk UI.&lt;/p&gt;
&lt;p&gt;The reporting data can be exported via CSV and is also accessible via the API.&lt;/p&gt;
&lt;p&gt;This beta is open to all paying Snyk IaC customers. If you are eligible you can opt in by navigating to the settings page for your organisation, selecting "Snyk Peek" on the left hand side and then turning reporting on.&lt;/p&gt;
&lt;p&gt;When this functionality is released, it will be automatically available to all paid Snyk IaC customers.&lt;/p&gt;
&lt;p&gt;For more details, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360017495297-View-your-Infrastructure-as-Code-issues"&gt;product documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you have any issues please reach out to &lt;a href="mailto:support@snyk.io"&gt;support@snyk.io&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Broker Token Sharing and Rotation APIs</title>
			<pubDate>Wed, 16 Dec 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Broker-Token-Sharing-and-Rotation-APIs</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Broker-Token-Sharing-and-Rotation-APIs_December_16_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Happy to announce that we've just released a new set of APIs, allowing to share Broker tokens between multiple SCM integrations and rotate tokens continuously, without downtime.&lt;/p&gt;
&lt;p&gt;To learn more about the new APIs, please look at the following endpoints in our API docs website:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://snyk.docs.apiary.io/#reference/integrations/integration-broker-token-provisioning"&gt;Integration Broker Token Provisioning&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://snyk.docs.apiary.io/#reference/integrations/integration-broker-token-switching"&gt;Integration Broker Token Switching&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://snyk.docs.apiary.io/#reference/integrations/integration-cloning"&gt;Integration Cloning&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;The APIs are available for Standard, Pro and Enterprise users.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Import Go Modules projects from Git</title>
			<pubDate>Tue, 15 Dec 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Import-Go-Modules-projects-from-Git</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Import-Go-Modules-projects-from-Git_December_15_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Open Beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce that we are releasing support for importing Go Modules project from Git repos!&lt;/p&gt;
&lt;p&gt;We have supported Go Modules in the Snyk CLI for some time, but the ability to import directly from a Git repo has been one of our most popular feature requests.&lt;/p&gt;
&lt;p&gt;This feature is in open beta and we'll be gradually making it available to Snyk users over the next few weeks. If you can't wait and want to get access sooner, reach out to support@snyk.io.&lt;/p&gt;
&lt;p&gt;For more details, &lt;a href="https://support.snyk.io/hc/en-us/articles/360003817417-Snyk-for-Golang"&gt;please see the main documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Understand Container vulnerabilities with Relative Importance</title>
			<pubDate>Tue, 15 Dec 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Understand-Container-vulnerabilities-with-Relative-Importance</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Understand-Container-vulnerabilities-with-Relative-Importance_December_15_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Container vulnerabilities are tricky things to deal with, requiring an understanding of both Linux security and container image architecture. We&#8217;re pleased to announce a new feature that helps take some of the mystery out of prioritising and fixing container vulnerabilities: relative importance.&lt;/p&gt;
&lt;p&gt;Snyk now surfaces the different sources that were considered when determining a Linux Container severity.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://snyk.io/blog/container-linux-security-and-relative-importance/"&gt;Read more&lt;/a&gt; about relative importance, and our general Linux Container Security story!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Bug fix: Fixable issues in Reporting</title>
			<pubDate>Wed, 02 Dec 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Bug-fix-Fixable-issues-in-Reporting</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Bug-fix-Fixable-issues-in-Reporting_December_2_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Tomorrow at 9 AM EST, we will push a bug fix that may impact the count of fixable issues in the grouped view of the Issues tab within reporting.&lt;/p&gt;
&lt;p&gt;This fix corrects a mistake in aggregation that incorrectly marked entire issue groups as not fixable if some issues in that group were not fixable. These issue groups will now be marked as fixable, as some issues within the group are fixable.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Prioritize your vulnerabilities with our new Security Policies</title>
			<pubDate>Wed, 18 Nov 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Prioritize-your-vulnerabilities-with-our-new-Security-Policies</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Prioritize-your-vulnerabilities-with-our-new-Security-Policies_November_18_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're pleased to announce the general availability of Security Policies - enabling security teams to create rules to automatically prioritize or de-prioritize specific vulnerabilities, and ensuring developers can easily understand which vulnerabilities should be tackled first.&lt;/p&gt;
&lt;p&gt;This is just the beginning for Security Policies! We will be adding more conditions and actions over time to give you even more control over what your developers see.&lt;/p&gt;
&lt;p&gt;More information about how Security Policies can help with prioritization is available on &lt;a href="https://snyk.io/blog/snyks-developer-first-prioritization-capabilities/"&gt;our blog&lt;/a&gt;. To learn more about how to use this capability, check out &lt;a href="https://support.snyk.io/hc/en-us/articles/360014568658-Getting-started-Security-policies"&gt;our help center documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Security Policies is available for Pro and Enterprise users.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Dockerfile vulnerabilities detection directly from Git</title>
			<pubDate>Wed, 11 Nov 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Dockerfile-vulnerabilities-detection-directly-from-Git</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Dockerfile-vulnerabilities-detection-directly-from-Git_November_11_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're thrilled to announce that Snyk now detects Dockerfiles directly from your source code manager and surfaces base image vulnerabilities.&lt;/p&gt;
&lt;p&gt;This allows you to identify issues before building the container image, and fix them before they land in registry or production based on our base image recommendations.&lt;/p&gt;
&lt;p&gt;To get started, import your Git repository (where your Dockerfile lies) and check out the new Dockerfile project created. There, you can see all the relevant information to start taking action, including base image vulnerabilities, base image recommendations and the option to link the Dockerfile project to other image projects you have in Snyk.&lt;/p&gt;
&lt;p&gt;To learn more about Dockerfile project, visit our &lt;a href="https://support.snyk.io/hc/en-us/articles/360015358818-Detect-vulnerable-bases-images-from-Dockerfile"&gt;Knowledge Center&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Plugin now covers all JetBrains IDEs</title>
			<pubDate>Wed, 04 Nov 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Snyk-Plugin-now-covers-all-JetBrains-IDEs</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Snyk-Plugin-now-covers-all-JetBrains-IDEs_November_4_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Happy to announce that Snyk JetBrains IDE plugin now supports all JetBrains IDEs, allowing developers to find and fix security vulnerabilities and license issues in their open source dependencies from within the IDE!&lt;/p&gt;
&lt;p&gt;In addition to IntelliJ and PyCharm, the following IDEs are now supported as well: &lt;strong&gt;Android Studio&lt;/strong&gt;, &lt;strong&gt;AppCode&lt;/strong&gt;, &lt;strong&gt;GoLand&lt;/strong&gt;, &lt;strong&gt;PhpStorm&lt;/strong&gt;, &lt;strong&gt;Rider&lt;/strong&gt;, &lt;strong&gt;RubyMine&lt;/strong&gt; and &lt;strong&gt;WebStorm&lt;/strong&gt;.&lt;/p&gt;
&lt;p&gt;To learn more about the new JetBrains plugin, visit our &lt;a href="https://support.snyk.io/hc/en-us/articles/360004032317-JetBrains-IDE-Plugins"&gt;Knowledge Center&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Python Poetry support</title>
			<pubDate>Tue, 03 Nov 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Python-Poetry-support</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Python-Poetry-support_November_3_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are very happy to announce that the Snyk CLI now supports testing &lt;a href="https://python-poetry.org/"&gt;Python Poetry&lt;/a&gt; projects &#127881;&lt;/p&gt;
&lt;p&gt;Poetry is a great solution for all your Python dependency management, packaging and publishing needs, and we've been keen to support it for a while.&lt;/p&gt;
&lt;p&gt;CLI support for Poetry is available from version 1.423, see the &lt;a href="https://support.snyk.io/hc/en-us/articles/360004699377-Snyk-for-Python"&gt;documentation&lt;/a&gt; for more details.&lt;/p&gt;
&lt;p&gt;And watch this space for more announcements as we'll be extending our support in the near future&#8230; &#129303;&lt;/p&gt;</description>
		</item>
		<item>
			<title>Filtering projects by tags in the UI</title>
			<pubDate>Wed, 14 Oct 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Filtering-projects-by-tags-in-the-UI</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Filtering-projects-by-tags-in-the-UI_October_14_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We recently released the ability to be able to group projects in the UI with the use of project tags, so you can work with projects at scale. Today, we're thrilled to announce that you can filter projects by those tags in the project listing page - you can now easily find that needle of a project in your haystack!&lt;/p&gt;
&lt;p&gt;You can filter by tags and attributes at the same time, so you can organise your system however you please!&lt;/p&gt;
&lt;p&gt;You can read more about how to scale successfully with Snyk in our &lt;a href="https://snyk.io/blog/how-to-scale-successfully-with-snyk/"&gt;blog&lt;/a&gt;, and you can learn more about project tagging by visiting our &lt;a href="https://snyk.docs.apiary.io/#reference/projects/project-tags"&gt;API docs&lt;/a&gt; and &lt;a href="https://support.snyk.io/hc/en-us/articles/360013865038"&gt;Knowledge Centre&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Project Tags</title>
			<pubDate>Wed, 30 Sep 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Project-Tags</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Project-Tags_September_30_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Identifying the right projects to work on at the right time can quickly become unmanageable when you scale from dozens to hundreds, or even thousands. Ensuring that your teams are working as efficiently as possible can let them focus on fixing issues rather than finding what they should be working on &#8212; you need to be able to find a needle in this haystack!&lt;/p&gt;
&lt;p&gt;It&#8217;s with great pleasure that we can announce the latest feature to improve management at scale: Project tags. With Project tags, you can organize and locate your projects by tagging them based on any criteria that you have. Whether it&#8217;s grouping projects by team, the applications they are part of, or the potential risk they have in your system, you can organize and prioritize your work how you like.&lt;/p&gt;
&lt;p&gt;You can read more about how to scale successfully with Snyk in our &lt;a href="https://snyk.io/blog/how-to-scale-successfully-with-snyk/"&gt;blog&lt;/a&gt;, and you can learn more about project tagging by visiting our &lt;a href="https://snyk.docs.apiary.io/#reference/projects/project-tags"&gt;API docs&lt;/a&gt; and &lt;a href="https://support.snyk.io/hc/en-us/articles/360013865038"&gt;Knowledge Centre&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Non-SPDX licenses support</title>
			<pubDate>Wed, 23 Sep 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Non-SPDX-licenses-support</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Non-SPDX-licenses-support_September_23_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Happy to share that Snyk licenses support has been extended to include non-SPDX licenses. By default, newly added licenses will inherit the &#8220;Unknown&#8221; license severity, which can be later updated at the settings area.&lt;/p&gt;
&lt;p&gt;In order to be alerted, in cases where those licenses were used in any of your projects, verify that the severity level is not set to &#8220;None&#8221;.&lt;/p&gt;
&lt;p&gt;To learn more about license compliance, visit our &lt;a href="https://support.snyk.io/hc/en-us/categories/360000502958-License-compliance"&gt;Knowledge Center&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Signed Commits for Fix and Upgrade PRs in GitHub</title>
			<pubDate>Mon, 07 Sep 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Signed-Commits-for-Fix-and-Upgrade-PRs-in-GitHub</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Signed-Commits-for-Fix-and-Upgrade-PRs-in-GitHub_September_7_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;One of Snyk&#8217;s most powerful features is the ability to open fix and upgrade pull requests, directly in the SCM, making it easy for developers to fix vulnerabilities in their repos and keep the dependencies up to date in one click.&lt;/p&gt;
&lt;p&gt;From now on, all of our PRs in GitHub (both fix and upgrade) will be signed with a PGP key, providing developers the confidence that Snyk's fix and upgrade PRs are generated by a trusted source &#127881;&lt;/p&gt;
&lt;p&gt;To learn more about the GitHub integration and Signed Commits for Fix and Upgrade PRs, visit our &lt;a href="https://snyk.zendesk.com/hc/en-us/articles/360004032117"&gt;Knowledge Center&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Project Header refresh and Project Attributes</title>
			<pubDate>Thu, 03 Sep 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Project-Header-refresh-and-Project-Attributes</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Project-Header-refresh-and-Project-Attributes_September_3_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;If you look closely we&#8217;ve given the project page a makeover; we&#8217;ve not taken anything away from the page, we&#8217;ve just moved things around to help improve the user experience. This is to help cater for project attributes, which are static and non-configurable fields on projects which allow you to add additional metadata (also known as &#8220;values&#8221;) to a project.&lt;/p&gt;
&lt;p&gt;The values added to a project can be used to group, organise, and filter projects in Snyk so that you can work efficiently and effectively prioritise what needs to be worked on. You can apply values to projects through the UI and through the API.&lt;/p&gt;
&lt;p&gt;To learn more about project attributes, visit our &lt;a href="https://snyk.docs.apiary.io/reference/projects/project-attributes"&gt;API docs&lt;/a&gt; and &lt;a href="https://support.snyk.io/hc/en-us/articles/360012703537-Project-Attributes"&gt;Knowledge Center&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved PR Tests logic</title>
			<pubDate>Thu, 27 Aug 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Improved-PR-Tests-logic</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Improved-PR-Tests-logic_August_27_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re happy to share that we&#8217;ve improved our PR Tests logic!&lt;/p&gt;
&lt;p&gt;When Snyk cannot find in the tested pull request a manifest file that is being monitored, it will now skip its test instead of failing it, so the PR check will show as successful.&lt;/p&gt;
&lt;p&gt;This change allows to keep the repositories you monitor with Snyk secured, by testing new pull requests for vulnerabilities and license issues, while allowing developers to get more accurate PR tests results.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Opening fix and upgrade pull requests from a fixed GitHub account</title>
			<pubDate>Mon, 17 Aug 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Opening-fix-and-upgrade-pull-requests-from-a-fixed-GitHub-account</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Opening-fix-and-upgrade-pull-requests-from-a-fixed-GitHub-account_August_17_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Happy to share that Snyk now allows you to configure a specific GitHub account on whose behalf the fix and upgrade PRs will be opened!&lt;/p&gt;
&lt;p&gt;In order to use this feature, you'll need to follow the above steps:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Open GitHub's Integrations Settings page by clicking on &lt;strong&gt;Settings&lt;/strong&gt; &#8594; &lt;strong&gt;Integrations&lt;/strong&gt; &#8594; &lt;strong&gt;GitHub&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Enable the toggle button under the &lt;strong&gt;Open fix and upgrade pull requests from a fixed GitHub account&lt;/strong&gt; setting&lt;/li&gt;
&lt;li&gt;Follow the in-page instructions for creating a personal access token in GitHub&lt;/li&gt;
&lt;li&gt;Provide the newly generated token to Snyk so it can be used for opening Fix PRs in GitHub&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;To learn more about this feature, &lt;a href="https://support.snyk.io/hc/en-us/articles/360010843797-Opening-fix-and-upgrade-pull-requests-from-a-fixed-GitHub-account-"&gt;visit our docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk now supports Alpine 3.12</title>
			<pubDate>Tue, 28 Jul 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Snyk-now-supports-Alpine-3.12</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Snyk-now-supports-Alpine-3.12_July_28_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk now supports the newest release from Alpine - 3.12. Rescan to get started.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Prioritize the vulnerabilities that are reachable from your code</title>
			<pubDate>Wed, 22 Jul 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Prioritize-the-vulnerabilities-that-are-reachable-from-your-code</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Prioritize-the-vulnerabilities-that-are-reachable-from-your-code_July_22_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Customers who use Snyk to scan their Java Maven applications can now understand which vulnerabilities have a path from the source code to the vulnerable function and prioritize accordingly.&lt;/p&gt;
&lt;p&gt;Reachable Vulnerabilities is Beta now and available for Java Maven projects scanned via the CLI. Run &lt;code&gt;snyk test --reachable&lt;/code&gt; in order to start using.&lt;/p&gt;
&lt;p&gt;Read more about Reachable Vulnerabilities &lt;a href="https://support.snyk.io/hc/en-us/articles/360010554837-Reachable-Vulnerabilities-"&gt;in our documentation&lt;/a&gt; and read how it fits with all of our new &lt;a href="https://snyk.io/blog/snyks-developer-first-prioritization-capabilities/"&gt;prioritization features&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>More accurate prioritization for Kubernetes projects</title>
			<pubDate>Wed, 22 Jul 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#More-accurate-prioritization-for-Kubernetes-projects</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#More-accurate-prioritization-for-Kubernetes-projects_July_22_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;For Snyk Container customers using our Kubernetes integration we're providing even &lt;a href="https://snyk.io/blog/snyks-developer-first-prioritization-capabilities/"&gt;more context to our new Priority Score&lt;/a&gt;. Where we find vulnerable packages running in poorly configured workloads we'll increase the priority, making it even easier to identify high-risk vulnerabilities.&lt;/p&gt;
&lt;p&gt;Read more about the new &lt;a href="https://snyk.io/blog/snyks-developer-first-prioritization-capabilities/"&gt;Snyk prioritization features&lt;/a&gt; and find our how to use the Snyk Container prioritization functionality in the &lt;a href="https://support.snyk.io/hc/en-us/articles/360010906897-Snyk-Priority-Score-and-Kubernetes"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Priority Score</title>
			<pubDate>Wed, 22 Jul 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Snyk-Priority-Score</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Snyk-Priority-Score_July_22_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're excited to formally introduce Snyk Priority Score, a new 0-1000 score encompassing not only basic CVSS, but also a range of other contextual factors that allow the score to reflect the value of fixing a vulnerability in the context of your project.&lt;/p&gt;
&lt;p&gt;This not only allows you to focus your effort for the fastest risk reduction, but also the best ROI on valuable time and effort!&lt;/p&gt;
&lt;p&gt;Read more about the score &lt;a href="https://docs.snyk.io/features/fixing-and-prioritizing-issues/starting-to-fix-vulnerabilities/snyk-priority-score"&gt;in the documentation&lt;/a&gt;, or find out how this fits in with a suite of other &lt;a href="https://snyk.io/blog/snyks-developer-first-prioritization-capabilities/"&gt;new Snyk prioritization functionality&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Exploit maturity now available for Linux</title>
			<pubDate>Sun, 28 Jun 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Exploit-maturity-now-available-for-Linux</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Exploit-maturity-now-available-for-Linux_June_28_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are happy to update that exploit maturity information is also now available in Alpine, Ubuntu and Debian. Check out &lt;a href="https://support.snyk.io/hc/en-us/articles/360006113978-Evaluating-and-prioritizing-vulnerabilities"&gt;documentation&lt;/a&gt; to learn more!&lt;/p&gt;</description>
		</item>
		<item>
			<title>IntelliJ Plugin now supports Gradle and Licences</title>
			<pubDate>Mon, 22 Jun 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#IntelliJ-Plugin-now-supports-Gradle-and-Licences</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#IntelliJ-Plugin-now-supports-Gradle-and-Licences_June_22_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Happy to share that we&#8217;ve just released a new version of the the Snyk Vulnerability Scanner plugin for IntelliJ!&lt;/p&gt;
&lt;p&gt;The Snyk Vulnerability Scanner helps you find and fix security vulnerabilities and licence issues in your projects, all from within the IDE.&lt;/p&gt;
&lt;p&gt;The new version is based on &lt;a href="https://support.snyk.io/hc/en-us/articles/360003812458-Getting-started-with-the-CLI"&gt;Snyk CLI&lt;/a&gt; and has an integral support for Gradle (in addition to Maven) and licenses.&lt;/p&gt;
&lt;p&gt;To learn more about the the new version, visit the &lt;a href="https://plugins.jetbrains.com/plugin/10972-snyk-vulnerability-scanning"&gt;plugin page&lt;/a&gt;, at JetBrains marketplace.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Detect misconfigurations in Helm Charts</title>
			<pubDate>Fri, 05 Jun 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Detect-misconfigurations-in-Helm-Charts</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Detect-misconfigurations-in-Helm-Charts_June_5_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're continuing to expand our new infrastructure as code features, with support for detecting security misconfigurations in Helm Charts now available to all. See the &lt;a href="https://snyk.io/blog/checking-helm-charts-for-security-misconfigurations/"&gt;blog post for all the details&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Tag your projects using the API</title>
			<pubDate>Mon, 01 Jun 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Tag-your-projects-using-the-API</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Tag-your-projects-using-the-API_June_1_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;It's now possible to tag your projects via the API! &#127881; Project tags allow you to label your projects in any way you like, such as by team, risk status, or even the type of applications the projects are used by. You can then use the new API to filter all the projects that have the same tag.&lt;/p&gt;
&lt;p&gt;For more information on how to use project tags, head on over to the &lt;a href="https://snyk.docs.apiary.io/#reference/projects/project-tags/add-a-tag-to-a-project"&gt;documentation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;This feature will be available in the UI soon, but until then, happy tagging!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk Broker Security Fixes</title>
			<pubDate>Thu, 28 May 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Snyk-Broker-Security-Fixes</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Snyk-Broker-Security-Fixes_May_28_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We have introduced &lt;a href="https://github.com/snyk/broker/blob/master/SECURITY.md"&gt;several security fixes&lt;/a&gt; to our open source Broker. We&#8217;d like to thank Wing Chan of The Hut Group that responsibly disclosed the issues to us via our bug bounty program.&lt;/p&gt;
&lt;p&gt;These issues pertained to increased privileges available to specific internal Snyk Personnel only. All issues were patched for all supported SCMs in version 4.80.0 of the Broker. We also have taken steps to improve the auditability of the Broker code, and have also improved both client and server-side logging in order to improve customer and Snyk visibility of activity on the service.&lt;/p&gt;</description>
		</item>
		<item>
			<title>APIs for creating a new Git integration</title>
			<pubDate>Tue, 26 May 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#APIs-for-creating-a-new-Git-integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#APIs-for-creating-a-new-Git-integration_May_26_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Happy to share that we've just released new APIs that will allow you to create new Git integrations and to &#8220;Brokerize&#8221; existing integrations without having to contact Snyk support &#127881;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;All Git integrations are supported&lt;/strong&gt;: GitHub, GitHub Enterprise, BitBucket Cloud, BitBucket Server, GitLab and Azure Repos.&lt;/p&gt;
&lt;p&gt;With the new set of APIs, you'll be able to:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Create new integration (Brokered / non Brokered)&lt;/li&gt;
&lt;li&gt;"Brokerize" an existing integration&lt;/li&gt;
&lt;li&gt;"Debrokerize" an existing integration&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;To find out more about the new endpoints, please take a look at our API docs:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://snyk.docs.apiary.io/#reference/integrations/integrations/add-new-integration"&gt;Add new integration&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://snyk.docs.apiary.io/#reference/integrations/integration/update-existing-integration"&gt;Update existing integration&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Azure Repos Server Integration (formerly TFS)</title>
			<pubDate>Wed, 20 May 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Azure-Repos-Server-Integration-(formerly-TFS)</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Azure-Repos-Server-Integration-(formerly-TFS)_May_20_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are excited to share that starting today, &lt;strong&gt;Pro&lt;/strong&gt; and &lt;strong&gt;Enterprise&lt;/strong&gt; customers, can test, fix and monitor their Azure Repos Server projects for open source vulnerabilities.&lt;/p&gt;
&lt;p&gt;In order to integrate your Azure Repos Server instance to Snyk, all you need to do is to go to the Integrations page and click on Azure Repos.&lt;/p&gt;
&lt;p&gt;Once the Azure Repos integration settings page loads, you'll be asked to enter the URL of your on-premise Azure Repo Server instance along with the personal access token you've generated for Snyk.&lt;/p&gt;
&lt;p&gt;After filling out these details correctly, you'll get a confirmation message ensuring that Snyk has successfully connected to Azure Repos and you'll be able to start importing projects to Snyk.&lt;/p&gt;
&lt;p&gt;Please note that the new integration supports &lt;em&gt;TFS v2018 Update 2&lt;/em&gt; and above.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Detecting application vulnerabilities in container images</title>
			<pubDate>Tue, 19 May 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Detecting-application-vulnerabilities-in-container-images</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Detecting-application-vulnerabilities-in-container-images_May_19_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk is thrilled to announce the new support for scanning application vulnerabilities in container images, alongside the operating system ones, all in a single scan.&amp;#x20;&lt;/p&gt;
&lt;p&gt;If you have Node, Ruby, Python or PHP applications as part of your image, we can now surface their dependencies vulnerabilities as well during scan. To use this feature, you need to enable it in your container registry integration settings.&lt;/p&gt;
&lt;p&gt;To learn more, check out our &lt;a href="https://snyk.io/blog/detecting-vulnerabilities-in-container-images/"&gt;blog post&lt;/a&gt; and get started!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved license policy management for Pro and Enterprise customers</title>
			<pubDate>Thu, 23 Apr 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Improved-license-policy-management-for-Pro-and-Enterprise-customers</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Improved-license-policy-management-for-Pro-and-Enterprise-customers_April_23_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk is excited to release the first phase of our shared policies functionality that we will be working on throughout 2020. With new and improved license policies, group administrators can now leverage Snyk to more easily manage and scale their license compliance throughout the SDLC.&lt;/p&gt;
&lt;p&gt;Learn more about our developer-first approach to license compliance management on &lt;a href="https://snyk.io/blog/license-compliance-management/"&gt;our blog&lt;/a&gt; and in our &lt;a href="https://support.snyk.io/hc/en-us/articles/360007476397-Shared-Policies-Overview"&gt;help center&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Support for Private Artifactory npm registries now available</title>
			<pubDate>Tue, 21 Apr 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Support-for-Private-Artifactory-npm-registries-now-available</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Support-for-Private-Artifactory-npm-registries-now-available_April_21_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are pleased to announce we have added support for private Artifactory npm registries.&lt;/p&gt;
&lt;p&gt;Whether your Artifactory npm registry is hosted in the cloud or on your internal network, you can now update your settings to enable Snyk to access your private Node.js packages. This works for both &lt;code&gt;npm&lt;/code&gt; and &lt;code&gt;yarn&lt;/code&gt; projects.&lt;/p&gt;
&lt;p&gt;Enabling this feature means Snyk can now re-lock &lt;code&gt;yarn.lock&lt;/code&gt; files and update &lt;code&gt;package-lock.json&lt;/code&gt; files more accurately when creating Fix Pull/Merge Requests.&lt;/p&gt;
&lt;p&gt;To get started, &lt;a href="https://support.snyk.io/hc/en-us/articles/360007537418"&gt;check out the documentation&lt;/a&gt;!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Skipping failing PR checks</title>
			<pubDate>Tue, 31 Mar 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Skipping-failing-PR-checks</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Skipping-failing-PR-checks_March_31_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;re pleased to announce we&#8217;ve enhanced Snyk&#8217;s security and license testing for pull requests to better support secure development workflows!&lt;/p&gt;
&lt;p&gt;To further ensure development pipelines are not broken needlessly and to give developers full visibility into the results of Snyk&#8217;s security testing, developers can now see the full details on why their pull request failed and subsequently request the administrator to skip the test and &#8220;force pass&#8221; the pull request.&lt;/p&gt;
&lt;p&gt;More details in &lt;a href="https://snyk.io/blog/shift-left-enhanced-security-pull-requests/"&gt;this blog post&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Red Hat OpenShift 4 support for the Snyk Container Kubernetes integration</title>
			<pubDate>Tue, 10 Mar 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Red-Hat-OpenShift-4-support-for-the-Snyk-Container-Kubernetes-integration</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Red-Hat-OpenShift-4-support-for-the-Snyk-Container-Kubernetes-integration_March_10_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now install the Snyk Container Kubernetes integration via the OperatorHub built-in marketplace, and then import and scan workloads for vulnerabilities.&lt;/p&gt;
&lt;p&gt;Import OpenShift workloads into Snyk and start tracking your workloads for vulnerabilities. See our &lt;a href="https://support.snyk.io/hc/en-us/articles/360006548317-Install-the-Snyk-controller-with-OpenShift-and-OperatorHub"&gt;documentation&lt;/a&gt; for more information.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Group Viewer service accounts now available</title>
			<pubDate>Tue, 10 Mar 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Group-Viewer-service-accounts-now-available</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Group-Viewer-service-accounts-now-available_March_10_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now create a view-only group-level service account, enabling read access to all organizations within the group - including their projects. To get started, check out &lt;a href="https://support.snyk.io/hc/en-us/articles/360004037597-Service-accounts-overview"&gt;our documentation&lt;/a&gt;!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk partners with Greenkeeper: keep your dependencies healthy</title>
			<pubDate>Thu, 05 Mar 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Snyk-partners-with-Greenkeeper-keep-your-dependencies-healthy</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Snyk-partners-with-Greenkeeper-keep-your-dependencies-healthy_March_5_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're super happy to announce our partnership with Greenkeeper, from &lt;a href="https://neighbourhood.ie/"&gt;Neighborhoodie&lt;/a&gt;!&lt;/p&gt;
&lt;p&gt;With this partnership we've been able to improve our automatic upgrade dependency pull request functionality, and to build a seamless migration journey to join Snyk!&lt;/p&gt;
&lt;p&gt;Get started maintaining the health of your dependencies with &lt;a href="https://www.youtube.com/watch?v=4NOwVZI-YXA\&amp;amp;list=PLQ6IC7glz4-Wx04FnHfWfN3Jjddqo2YFJ\&amp;amp;index=5"&gt;our quick video&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;For more information about our cool automatic upgrade dependency pull request feature, check out:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://snyk.io/blog/snyk-partners-with-greenkeeper-to-help-developers-proactively-maintain-dependency-health/"&gt;Our blog post&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://support.snyk.io/hc/en-us/articles/360004002738-Upgrading-dependencies-with-automatic-PRs"&gt;Our documentation&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://snyk.io/blog/snyk-partners-with-greenkeeper-to-help-developers-proactively-maintain-dependency-health/"&gt;Greenkeeper's blog&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://www.prnewswire.com/news-releases/snyk-and-neighbourhoodie-partner-to-keep-software-updated-and-secure-301017294.html"&gt;Our press release&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Combined status checks for pull request tests</title>
			<pubDate>Thu, 05 Mar 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Combined-status-checks-for-pull-request-tests</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Combined-status-checks-for-pull-request-tests_March_5_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We've just released a new enhancement to our PR tests feature! In the next few days, instead of receiving a status check per project (manifest) file, you'll receive only two combined status checks for the project in the repository: one for security and one for licenses.&lt;/p&gt;
&lt;p&gt;When you click on the Details link, you&#8217;ll reach a page in Snyk showing a list of tests with a per-project status drill down. This feature is great for mono-repos, allowing you to see a reduced number of status checks coming from Snyk.&lt;/p&gt;
&lt;details&gt;

&lt;summary&gt;Have GitHub repos where Snyk checks are marked as &lt;em&gt;Required&lt;/em&gt;?&lt;/summary&gt;

If Snyk checks are marked as _Required_ in your GitHub repository settings, you'll need to swap the Required checks settings to the new combined checks (to look for the generic "security/snyk" check, instead of "security/snyk - \&lt;MANIFEST\_FILE&gt;").

In order to avoid blocking your work, we added detailed migration instructions that allow you to start the migration whenever you're ready. You can find the instructions in the Organization Settings page --&gt; Integrations --&gt; GitHub.

&lt;/details&gt;</description>
		</item>
		<item>
			<title>New Python fix pull requests</title>
			<pubDate>Wed, 26 Feb 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#New-Python-fix-pull-requests</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#New-Python-fix-pull-requests_February_26_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk is excited to release automated fix pull requests providing you with additional support with the security of your Python dependencies. See &lt;a href="https://snyk.io/blog/automating-remediation-for-vulnerabilities-in-python-dependencies-using-snyk/"&gt;our blog&lt;/a&gt; and &lt;a href="https://support.snyk.io/hc/en-us/articles/360004699377-Python-for-Snyk"&gt;our docs&lt;/a&gt; for more details about Python support.&lt;/p&gt;</description>
		</item>
		<item>
			<title>EKS and ECR support for container scanning</title>
			<pubDate>Tue, 25 Feb 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#EKS-and-ECR-support-for-container-scanning</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#EKS-and-ECR-support-for-container-scanning_February_25_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk Container detects workloads as they are created in EKS and connects to ECR to scan the container image for vulnerabilities and provide fix recommendations. We also alert you to potential workload configuration security issues. Read more about this support in &lt;a href="https://support.snyk.io/hc/en-us/articles/360003916158-Snyk-controller-installation-for-Kubernetes-integration-with-Helm"&gt;our docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Actionable remediation advice</title>
			<pubDate>Tue, 25 Feb 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Actionable-remediation-advice</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Actionable-remediation-advice_February_25_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk is dedicated to helping you secure your apps and fix vulnerabilities. In that spirit, we've further improved test results from our CLI and our app. Once Snyk tests your manifest files, we then provide summary and detailed remediation advice for vulnerabilities that have fixes available, enabling you to resolve those vulnerabilities in your code with the help of a clear overview, suggestions and explanations.&lt;/p&gt;
&lt;p&gt;See &lt;a href="https://support.snyk.io/hc/en-us/articles/360006113798-Remediate-your-vulnerabilities"&gt;our docs&lt;/a&gt; for more information about this cool improvement.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved reports experience</title>
			<pubDate>Tue, 11 Feb 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Improved-reports-experience</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Improved-reports-experience_February_11_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We've made some improvements to how our reporting looks and feels, making it easier to use!&lt;/p&gt;
&lt;p&gt;You can now set certain filters that remain in place as you navigate through the various tabs within reporting.&lt;/p&gt;
&lt;p&gt;Read more about reports in &lt;a href="https://support.snyk.io/hc/en-us/articles/360004002558-Reports-overview"&gt;our docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Artifactory container registry support available for Pro and Enterprise customers</title>
			<pubDate>Tue, 11 Feb 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Artifactory-container-registry-support-available-for-Pro-and-Enterprise-customers</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Artifactory-container-registry-support-available-for-Pro-and-Enterprise-customers_February_11_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Pro and Enterprise customers can now import container images from your Artifactory container registry and scan those images for vulnerabilities in Snyk.&lt;/p&gt;
&lt;p&gt;Learn more &lt;a href="https://snyk.io/blog/find-and-fix-vulnerabilities-in-artifactory-container-repositories/"&gt;in the blog post&lt;/a&gt; and find out how to &lt;a href="https://support.snyk.io/hc/en-us/articles/360004302837-Container-security-with-JFrog-Artifactory-integrate-and-test"&gt;get started in the documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Now supporting Alpine 3.11</title>
			<pubDate>Thu, 06 Feb 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Now-supporting-Alpine-3.11</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Now-supporting-Alpine-3.11_February_6_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk now supports Alpine's newest release - 3.11 &lt;a href="https://app.snyk.io/projects"&gt;Rescan your projects&lt;/a&gt; to see vulnerabilities.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved Linux Vulnerability severity definitions</title>
			<pubDate>Thu, 09 Jan 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Improved-Linux-Vulnerability-severity-definitions</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Improved-Linux-Vulnerability-severity-definitions_January_9_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk now goes beyond NVD to bring distro-specific severities for our Linux vulnerabilities. With this change, even when a vulnerability is considered to be a high-severity issue in the most general context, it might still be a lower severity issue in specific Linux distros such as Debian or Ubuntu (or others). Some users might see a major drop in high vulnerabilities, that will enable them to better focus where it matters. To see updated results, retest your projects now. We're very excited about this improvement; let us know what you think!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Our image database offers more support than ever!</title>
			<pubDate>Sun, 05 Jan 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Our-image-database-offers-more-support-than-ever!</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Our-image-database-offers-more-support-than-ever!_January_5_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're now supporting your RHEL operating system distros, with scanning and remediation advice available for rhel:8, rhel:7,rhel:6, and rhel:5.&lt;/p&gt;
&lt;p&gt;&lt;em&gt;How to get started:&lt;/em&gt; If you don't see updated results for your monitored projects already, try retesting or check with our &lt;a href="mailto:support@snyk.io"&gt;Support team&lt;/a&gt; and we'll get things sorted out for you!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Our license scanning has been dramatically enriched</title>
			<pubDate>Sun, 05 Jan 2020 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2020#Our-license-scanning-has-been-dramatically-enriched</link>
			<guid>https://snyk.gitbook.io/product-updates/2020#Our-license-scanning-has-been-dramatically-enriched_January_5_2020</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We've recently enriched our license detection by looking deeper inside your projects for Maven, npm, Python and Ruby packages. And there's still more to come &#8230; Don't see updated results? Contact our &lt;a href="mailto:support@snyk.io"&gt;Support team&lt;/a&gt; and we'll get things sorted out for you!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved CLI authentication &amp; token management</title>
			<pubDate>Fri, 20 Dec 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Improved-CLI-authentication-&amp;-token-management</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Improved-CLI-authentication-&amp;-token-management_December_20_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;ve improved our CLI authentication by introducing two important new security features: The CLI authentication process is now followed by a new approval webpage, designed to provide better user visibility and to protect against CSRF attacks. Read about authentication in &lt;a href="https://support.snyk.io/hc/en-us/articles/360003812458-Getting-started-with-the-CLI"&gt;our docs&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;We&#8217;ve also added the ability to revoke and regenerate your personal API token from Account Settings. To learn more about this feature, &lt;a href="https://support.snyk.io/hc/en-us/articles/360004008278-Revoke-token"&gt;check out this article&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;We would like to credit and thank &lt;a href="https://twitter.com/JLLeitschuh"&gt;Jonathan Leitschuh&lt;/a&gt; and &lt;a href="https://www.linkedin.com/in/eranlip"&gt;Eran Lipkin&lt;/a&gt; for independently reporting the CSRF issue to us via &lt;a href="https://support.snyk.io/hc/en-us/articles/360005918418-Snyk-vulnerability-disclosure-program"&gt;our Bug Bounty program&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Prioritize vulnerabilities quickly with our Exploit Maturity filter</title>
			<pubDate>Thu, 21 Nov 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Prioritize-vulnerabilities-quickly-with-our-Exploit-Maturity-filter</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Prioritize-vulnerabilities-quickly-with-our-Exploit-Maturity-filter_November_21_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Thanks to our diligent Security teams, Snyk is happy to release our new &lt;em&gt;Exploit Maturity&lt;/em&gt; filter from the &lt;em&gt;Projects&lt;/em&gt; and the &lt;em&gt;Reports&lt;/em&gt; areas as well as through our API. Using exploits in the wild as a rule of thumb for fast prioritization will bring you to the finish line seamlessly. Read more about our approach from &lt;a href="https://snyk.io/blog/whats-so-wild-about-exploits-in-the-wild-and-how-can-we-prioritize-accordingly/"&gt;our blog post&lt;/a&gt;, and more about the filter for the app in &lt;a href="https://support.snyk.io/hc/en-us/articles/360004002678-Evaluate-and-prioritize-vulnerabilities"&gt;our docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>AWS Lambda integration more secure</title>
			<pubDate>Tue, 19 Nov 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#AWS-Lambda-integration-more-secure</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#AWS-Lambda-integration-more-secure_November_19_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're glad to release our improved integration for AWS Lambda, ensuring a more secure connection. Read more about it in our &lt;a href="https://support.snyk.io/hc/en-us/articles/360003740158-AWS-Lambda-integration"&gt;docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Secure your data - configure session length</title>
			<pubDate>Tue, 19 Nov 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Secure-your-data-configure-session-length</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Secure-your-data-configure-session-length_November_19_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Administrators can now configure session length on the &lt;em&gt;Group&lt;/em&gt; level. When a session reaches its limit, the inactive user is automatically logged out. Configure from the Snyk UI or with our API. Read our &lt;a href="https://support.snyk.io/hc/en-us/articles/360003790697-Session-length"&gt;docs&lt;/a&gt; for more information.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Revoke &amp; regenerate your API token</title>
			<pubDate>Mon, 18 Nov 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Revoke-&amp;-regenerate-your-API-token</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Revoke-&amp;-regenerate-your-API-token_November_18_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now revoke and regenerate your personal API token from Account Settings. See our &lt;a href="https://support.snyk.io/hc/en-us/articles/360003746697-How-to-authenticate-your-Snyk-account-the-API-token"&gt;documentation&lt;/a&gt; for more info.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk now integrates directly with Kubernetes</title>
			<pubDate>Tue, 12 Nov 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Snyk-now-integrates-directly-with-Kubernetes</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Snyk-now-integrates-directly-with-Kubernetes_November_12_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now use Snyk to gather data about applications running in your Kubernetes clusters. Import the workloads you are interested in and we'll analyse them for vulnerabilities and detect issues with the configuration which might increase the risk of an exploit.&lt;/p&gt;
&lt;p&gt;This new integration is only available to Snyk Container customers, including existing Docker add-on customers. Find out more in the &lt;a href="https://snyk.io/blog/secure-your-kubernetes-applications-with-snyk-container/"&gt;blog post&lt;/a&gt; or jump straight into the &lt;a href="https://snyk.io/docs/kubernetes-integration-overview/"&gt;documentation&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Our Snyk CLI tool now supports CocoaPods!</title>
			<pubDate>Thu, 07 Nov 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Our-Snyk-CLI-tool-now-supports-CocoaPods!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Our-Snyk-CLI-tool-now-supports-CocoaPods!_November_7_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Test and monitor your CocoaPods projects from our Snyk CLI tool now with &lt;code&gt;snyk test&lt;/code&gt; and &lt;code&gt;snyk monitor&lt;/code&gt;. Available in all CLI versions from v1.230.8. To get started, make sure your CLI is up to date and run &lt;code&gt;snyk test&lt;/code&gt; or &lt;code&gt;snyk monitor&lt;/code&gt;. See &lt;a href="https://snyk.io/docs/swift-and-objective-c"&gt;our docs&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Project owner metadata</title>
			<pubDate>Fri, 18 Oct 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Project-owner-metadata</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Project-owner-metadata_October_18_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We now give you the ability to add a project owner inside each individual project page in the UI, or using the API. You can add anyone as a project owner who has access to the org that the project is in.&lt;/p&gt;
&lt;p&gt;To try this out, go to any project page and in the metadata header, you now have the option to assign a project owner from a list of everyone who has access to the project.&lt;/p&gt;
&lt;p&gt;At the moment, this data is only for reference, but we have plans to use it in other areas of Snyk in the future.&lt;/p&gt;</description>
		</item>
		<item>
			<title>More improved APIs served up just for you!</title>
			<pubDate>Thu, 17 Oct 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#More-improved-APIs-served-up-just-for-you!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#More-improved-APIs-served-up-just-for-you!_October_17_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;The API &lt;strong&gt;list all dependencies&lt;/strong&gt; endpoint now includes &lt;code&gt;issuesHigh&lt;/code&gt;, &lt;code&gt;issuesMedium&lt;/code&gt; and &lt;code&gt;issuesLow&lt;/code&gt; fields for each license, displaying the number of issues in the dependency per severity level.&lt;/p&gt;
&lt;p&gt;You can now filter for only dependencies that contain at least one issue of each severity. Use the &lt;code&gt;severity&lt;/code&gt; filter to do this. See &lt;a href="https://snyk.docs.apiary.io/#reference/dependencies/dependencies-by-organization/list-all-dependencies"&gt;our docs&lt;/a&gt; for more information.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Manage your teams' vulnerabilities easier than ever with enriched filters and printable reports!</title>
			<pubDate>Wed, 02 Oct 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Manage-your-teams'-vulnerabilities-easier-than-ever-with-enriched-filters-and-printable-reports!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Manage-your-teams'-vulnerabilities-easier-than-ever-with-enriched-filters-and-printable-reports!_October_2_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We're happy to report that we've improved our Reports area! You can now better search and filter your vulnerabilities by expanded parameters from the Issues tab and then export your results to CSV or print them in PDF.&lt;/p&gt;
&lt;p&gt;Check out our &lt;a href="https://snyk.io/docs/issues/"&gt;docs&lt;/a&gt; for more information!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Automated dependency upgrades for Bitbucket Cloud</title>
			<pubDate>Thu, 19 Sep 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Automated-dependency-upgrades-for-Bitbucket-Cloud</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Automated-dependency-upgrades-for-Bitbucket-Cloud_September_19_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Automated dependency upgrades are now available through your &lt;a href="https://app.snyk.io/manage/integrations/bitbucket-cloud?utm_source=docs\&amp;amp;utm_medium=upgrade-pr"&gt;Bitbucket cloud integration&lt;/a&gt;, or for specific Bitbucket Cloud projects.&lt;/p&gt;
&lt;p&gt;Read more in &lt;a href="https://snyk.io/docs/upgrading-dependencies/"&gt;our docs&lt;/a&gt;, give it a try and &lt;a href="https://support@snyk.io"&gt;let us know what you think&lt;/a&gt;!&lt;/p&gt;</description>
		</item>
		<item>
			<title>New legal license instructions added!</title>
			<pubDate>Wed, 18 Sep 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#New-legal-license-instructions-added!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#New-legal-license-instructions-added!_September_18_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Open Beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We've released the &lt;strong&gt;Legal Instructions&lt;/strong&gt; field where you can now customize advice for your teams when license issues are identified. You'll onboard developers faster than ever with relevant calls to action. Read all about it in &lt;a href="https://snyk.io/docs/configuring-license-policies/"&gt;our docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>More improvements in our API!</title>
			<pubDate>Tue, 03 Sep 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#More-improvements-in-our-API!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#More-improvements-in-our-API!_September_3_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You asked, we supplied! For Yarn and npm projects you can now also add your package-lock.json and yarn.lock files to get more accurate Snyk test results. See &lt;a href="https://snyk.docs.apiary.io/reference/test/npm/test-for-issues-in-a-public-package-by-name-and-version"&gt;our docs&lt;/a&gt; for more info.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Get a single user by user ID</title>
			<pubDate>Tue, 27 Aug 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Get-a-single-user-by-user-ID</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Get-a-single-user-by-user-ID_August_27_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Organization and group administrators can now retrieve user details for a single user with our new API command. Check out our &lt;a href="https://snyk.docs.apiary.io/#reference/users/user-details/get-user-details"&gt;docs&lt;/a&gt; for more help.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Scan your Bitbucket Cloud and GitHub Enterprise Dockerfiles as part of your container security</title>
			<pubDate>Sun, 18 Aug 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Scan-your-Bitbucket-Cloud-and-GitHub-Enterprise-Dockerfiles-as-part-of-your-container-security</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Scan-your-Bitbucket-Cloud-and-GitHub-Enterprise-Dockerfiles-as-part-of-your-container-security_August_18_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;As part of our continued efforts to further enrich container scanning, we&#8217;re super pleased to announce that you can now enrich your container scan results by adding your Dockerfile from Bitbucket Cloud or GitHub Enterprise (in addition to the support we already provided through GitHub and GitLab of course!). To get started, import your container from any of the registries we support. Need help with containers? Check out our &lt;a href="https://snyk.io/docs/add-your-dockerfile-for-base-image-remediation/"&gt;docs&lt;/a&gt;!&lt;/p&gt;</description>
		</item>
		<item>
			<title>Access Integration settings naturally from the Integrations area</title>
			<pubDate>Wed, 14 Aug 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Access-Integration-settings-naturally-from-the-Integrations-area</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Access-Integration-settings-naturally-from-the-Integrations-area_August_14_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Check out the new cogs &lt;img alt="cog.png" src="https://cloud.headwayapp.co/changelogs_images/images/big/000/033/861-221f2821f4188c0b2bce598c911dff93cf303178.png" /&gt; that appear on all of the integrations you&#8217;ve already set up. With a quick glance alone, you can identify the integrations you&#8217;ve already configured and then directly access their settings. See &lt;a href="https://snyk.io/docs/add-projects-to-snyk-2/"&gt;our docs&lt;/a&gt; for more help with your integrations.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Dockerfile parsing improved</title>
			<pubDate>Tue, 13 Aug 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Dockerfile-parsing-improved</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Dockerfile-parsing-improved_August_13_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Fix&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We know you might have experienced some issues with your Dockerfile in Snyk lately when using multiple build stages or Dockerfile variables, so we just wanted to let you know we&#8217;ve ironed things out.&lt;/p&gt;
&lt;p&gt;We now correctly:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;resolve base image names when using the Dockerfile multi-stage build functionality&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;identify installed packages when you use variables in your Dockerfile&amp;gt;&lt;/p&gt;
&lt;p&gt;Need some help with your Dockerfile and image remediation? Check out &lt;a href="https://snyk.io/docs/add-your-dockerfile-for-base-image-remediation/"&gt;our docs&lt;/a&gt; for more info.&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
		<item>
			<title>Track and easily upgrade your dependencies with Snyk</title>
			<pubDate>Sun, 11 Aug 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Track-and-easily-upgrade-your-dependencies-with-Snyk</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Track-and-easily-upgrade-your-dependencies-with-Snyk_August_11_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Open Beta&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Once imported for monitoring, enable your &lt;a href="https://app.snyk.io/manage/integrations/github#auto-dep-upgrades?utm_source=docs\&amp;amp;utm_medium=upgrade-pr"&gt;GitHub integrations&lt;/a&gt;, &lt;a href="https://app.snyk.io/manage/integrations/github-enterprise#auto-dep-upgrades?utm_source=docs\&amp;amp;utm_medium=upgrade-pr"&gt;GitHub Enterprise integrations&lt;/a&gt;, or specific projects for our new automatic upgrade PR feature and Snyk will automatically create upgrade PRs as relevant. Read more in &lt;a href="https://snyk.io/docs/upgrading-dependencies/"&gt;our docs&lt;/a&gt;, give it a try and &lt;a href="https://support@snyk.io"&gt;let us know what you think&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Deep manifest file search now available, and more!</title>
			<pubDate>Sun, 04 Aug 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Deep-manifest-file-search-now-available,-and-more!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Deep-manifest-file-search-now-available,-and-more!_August_4_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;From now on, you don&#8217;t need to ensure your manifest file is on the root level, and you don&#8217;t have to tell us where it is either. For GitHub, GitHub Enterprise, Bitbucket Server, Bitbucket Cloud and Azure Repos, we now search the entire depth of your project to find and analyze the manifest files for your application when importing projects to Snyk.&lt;/p&gt;
&lt;p&gt;To get started:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;for Broker, upgrade to at least v 4.53.0&lt;/li&gt;
&lt;li&gt;for projects Snyk is already monitoring, re-import.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;When importing (or re-importing), use the Exclude folders field if you don't want Snyk looking through certain parts of the project.&lt;/p&gt;
&lt;p&gt;Plus! We&#8217;ve updated our GitLab integration settings screen, making it easier than ever to onboard, integrate and import your GitLab projects for security scanning, fixing and monitoring. Log out and back in to get started.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Test your apps &amp; containers for security vulnerabilities with Snyk in CircleCI!</title>
			<pubDate>Thu, 01 Aug 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Test-your-apps-&amp;-containers-for-security-vulnerabilities-with-Snyk-in-CircleCI!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Test-your-apps-&amp;-containers-for-security-vulnerabilities-with-Snyk-in-CircleCI!_August_1_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Add our Snyk Orb for your CircleCI workflows and enable security testing as part of your automated builds. See &lt;a href="https://snyk.io/docs/circleci-integration-overview/"&gt;our docs&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk plugin for Eclipse!</title>
			<pubDate>Thu, 25 Jul 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Snyk-plugin-for-Eclipse!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Snyk-plugin-for-Eclipse!_July_25_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Our Snyk plugin for Eclipse is ready for installation from the Eclipse Marketplace. Check out &lt;a href="https://snyk.io/docs/eclipse-snyk-plugin-overview/"&gt;our docs&lt;/a&gt; and install now for improved security from directly within your development workflow.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Exclude folders option available for project import</title>
			<pubDate>Wed, 24 Jul 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Exclude-folders-option-available-for-project-import</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Exclude-folders-option-available-for-project-import_July_24_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now let us know which folders in your project can be ignored, shortening scan time.&lt;/p&gt;
&lt;p&gt;Check out &lt;a href="https://docs.snyk.io/"&gt;our docs&lt;/a&gt; for more info.&lt;/p&gt;</description>
		</item>
		<item>
			<title>New features and improvements for integration with container registries!</title>
			<pubDate>Sun, 21 Jul 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#New-features-and-improvements-for-integration-with-container-registries!</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#New-features-and-improvements-for-integration-with-container-registries!_July_21_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We are really excited to announce so many advancements in our container registry offering:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;We&#8217;ve released beta integration with Amazon Elastic, Google and Microsoft Azure container registries (ECR, GCR, ACR)!!&lt;/li&gt;
&lt;li&gt;We&#8217;re also happy to offer improved alerting whenever we scan your images by notifying you that we don&#8217;t support the operating system if that&#8217;s the case.&lt;/li&gt;
&lt;li&gt;Finally, our API import now also supports the Google Container Registry alongside the already supported ACR, ECR and Docker Hub.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;See &lt;a href="https://snyk.docs.apiary.io/#reference/integrations/import-projects/import"&gt;our API docs&lt;/a&gt; for more details.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk support for PHP Composer on Git now available</title>
			<pubDate>Wed, 17 Jul 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Snyk-support-for-PHP-Composer-on-Git-now-available</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Snyk-support-for-PHP-Composer-on-Git-now-available_July_17_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now import, test and monitor your PHP Composer projects from GitHub, Bitbucket, Azure Repos and GitLab.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk CLI and our plugin for Jenkins now support Alpine</title>
			<pubDate>Mon, 01 Jul 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Snyk-CLI-and-our-plugin-for-Jenkins-now-support-Alpine</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Snyk-CLI-and-our-plugin-for-Jenkins-now-support-Alpine_July_1_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Our CLI (v1.185.5) and our Jenkins plugin (v2.10.0) both support Alpine Linux now. To get started, ensure Alpine and Snyk are compatible, and you're ready to go. See &lt;a href="https://snyk.zendesk.com/knowledge/articles/360001929038/en-us?brand_id=360000047018"&gt;our docs&lt;/a&gt; to get up and running with the Snyk CLI v1.185.5 and greater.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk API import project now supports container registries</title>
			<pubDate>Sun, 30 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Snyk-API-import-project-now-supports-container-registries</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Snyk-API-import-project-now-supports-container-registries_June_30_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Import of Docker Hub, Azure Container Registry and Elastic Container Registry projects is now available with our &lt;a href="https://snyk.docs.apiary.io/#reference/integrations/import-projects/import"&gt;Import Project API&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk scans for private Maven repositories now available</title>
			<pubDate>Sun, 30 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Snyk-scans-for-private-Maven-repositories-now-available</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Snyk-scans-for-private-Maven-repositories-now-available_June_30_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;A Maven plugin supporting Snyk scans for private repos is now available for download from the &lt;a href="https://mvnrepository.com/artifact/io.snyk/snyk-maven-plugin"&gt;Maven Central Repository&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Snyk has been added to tldr</title>
			<pubDate>Sun, 30 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Snyk-has-been-added-to-tldr</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Snyk-has-been-added-to-tldr_June_30_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Snyk has been added to &lt;a href="https://tldr.sh/"&gt;tldr&lt;/a&gt;, an open source CLI tool that helps understand other CLI tools by offering examples. Run &lt;code&gt;npm install -g tldr&lt;/code&gt; and then &lt;code&gt;tldr snyk&lt;/code&gt;&lt;/p&gt;</description>
		</item>
		<item>
			<title>API&#8212;retrieve list of integrations by org</title>
			<pubDate>Tue, 25 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#APIretrieve-list-of-integrations-by-org</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#APIretrieve-list-of-integrations-by-org_June_25_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Retrieve a list of configured integration IDs per organization with our API. Use the integrations URL &lt;a href="http://snyk.io/api/v1/org/:org%3Cem%3Eid:/integrations"&gt;http://snyk.io/api/v1/org/:orgid:/integrations&lt;/a&gt; when submitting your request. See &lt;a href="https://snyk.docs.apiary.io/#reference/integrations/integrations/list"&gt;our API docs&lt;/a&gt; for information.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Full depth discovery with Bitbucket Server available</title>
			<pubDate>Mon, 24 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Full-depth-discovery-with-Bitbucket-Server-available</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Full-depth-discovery-with-Bitbucket-Server-available_June_24_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Broker client v4.51.0 is now available. Upgrade to this version of the client in order to get full depth discovery support with Bitbucket Server. See &lt;a href="https://snyk.io/docs/broker-overview/"&gt;our docs&lt;/a&gt; to upgrade and configure your Broker client now.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Onboard Snyk with Bitbucket Server integration seamlessly</title>
			<pubDate>Mon, 24 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Onboard-Snyk-with-Bitbucket-Server-integration-seamlessly</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Onboard-Snyk-with-Bitbucket-Server-integration-seamlessly_June_24_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;You can now configure your Bitbucket Server integration more easily with a simple, straightforward UI guiding you step-by-step.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Integration level PR settings now available</title>
			<pubDate>Sun, 23 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Integration-level-PR-settings-now-available</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Integration-level-PR-settings-now-available_June_23_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;PR test settings can now be managed from both the &lt;em&gt;Integration&lt;/em&gt; and the &lt;em&gt;Project&lt;/em&gt; levels.&lt;/p&gt;
&lt;p&gt;All existing projects set to default PR settings at the &lt;em&gt;Project&lt;/em&gt; level (per project) are now set to &lt;em&gt;Inherit from integration settings&lt;/em&gt;.&lt;/p&gt;
&lt;p&gt;All existing projects for which PR settings were customized at the &lt;em&gt;Project&lt;/em&gt; level are now set to &lt;em&gt;Custom&lt;/em&gt;.&lt;/p&gt;
&lt;p&gt;To configure default PR settings for all projects in one integration, go to &lt;em&gt;Integrations=&amp;gt;Settings&lt;/em&gt;.&lt;/p&gt;
&lt;p&gt;To configure &lt;em&gt;Custom&lt;/em&gt; PR settings for a single project, go to &lt;em&gt;Projects&lt;/em&gt; and from the specific project, click the &lt;em&gt;Settings&lt;/em&gt; cog.&lt;/p&gt;</description>
		</item>
		<item>
			<title>CLI project grouping</title>
			<pubDate>Wed, 19 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#CLI-project-grouping</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#CLI-project-grouping_June_19_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;When running &lt;code&gt;snyk monitor&lt;/code&gt; from the CLI, Git projects are now grouped together in the UI display. To get started, upgrade your Snyk CLI to v1.162.0 or above and then run &lt;code&gt;snyk monitor&lt;/code&gt; to refresh any already monitored projects.&lt;/p&gt;
&lt;p&gt;For more info about our CLI, see &lt;a href="https://snyk.io/docs/getting-started-with-our-cli/"&gt;our docs&lt;/a&gt;.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Improved Project page performance</title>
			<pubDate>Mon, 17 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Improved-Project-page-performance</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Improved-Project-page-performance_June_17_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;Improved&lt;/b&gt;&lt;/p&gt;&lt;p&gt;We&#8217;ve just rolled out an improved project page, resulting in faster page loads, especially for your large projects and for the projects you have with large numbers of vulnerabilities.&lt;/p&gt;</description>
		</item>
		<item>
			<title>Extended Integrations page</title>
			<pubDate>Sun, 16 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#Extended-Integrations-page</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#Extended-Integrations-page_June_16_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;New integrations are now easily accessible from our &lt;em&gt;Integrations&lt;/em&gt; page: Jenkins, Bitbucket pipelines, Snyk API and Fortify SSC. These new integrations are also conveniently linked to the &lt;a href="https://snyk.io/docs"&gt;relevant docs&lt;/a&gt; to help you integrate seamlessly. Stay tuned for even more additions soon!&lt;/p&gt;</description>
		</item>
		<item>
			<title>CLI 1.172.0 released with new Gradle attributes</title>
			<pubDate>Thu, 13 Jun 2019 00:00:00 GMT</pubDate>
			<link>https://snyk.gitbook.io/product-updates/2019#CLI-1.172.0-released-with-new-Gradle-attributes</link>
			<guid>https://snyk.gitbook.io/product-updates/2019#CLI-1.172.0-released-with-new-Gradle-attributes_June_13_2019</guid>
			<description>&lt;p&gt;&lt;b&gt;New&lt;/b&gt;&lt;/p&gt;&lt;p&gt;CLI v1.172.0 was released yesterday, including new Gradle parameters.&lt;/p&gt;
&lt;p&gt;Use:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;code&gt;--configuration-matching&lt;/code&gt; to test or monitor specified configurations (using a regular expression).&lt;/li&gt;
&lt;li&gt;&lt;code&gt;--configuration-attributes&lt;/code&gt; to specify different &lt;a href="https://developer.android.com/studio/build/build-variants"&gt;build variants&lt;/a&gt; when building an Android app. Check out &lt;a href="https://snyk.io/docs/cli-advanced-gradle-testing/"&gt;our docs&lt;/a&gt; for more CLI and Gradle info.&lt;/li&gt;
&lt;/ul&gt;</description>
		</item>
	</channel>
</rss>