Happy to announce that we’ve released a new major version of the Jenkins plugin 🎉
The new version supports new functionally and introduces significant improvements to the developer experience.
Here is a list of the main improvements:
Snyk installations are now downloaded from our CDN, e.g. static.snyk.io instead of github.com which decreases the installation time and improves the overall plugin performance.
Improved error handling and status reporting
Added a new option to not fail the step on errors such as failed installs or bad configuration and improved the failure logic so a failing test runs would fail only the current step rather than the entire build.
Credential Binding support
SNYK_TOKEN can now be provided as build environment variable, allowing users to use injected secrets and integrate credential vaults.
Multiple report support
HTML reports now use a date and time or their name, allowing users to run Snyk multiple times in a build to generate multiple reports
Improved explanation on how the plugin works and usage instructions.
Other improvements and bug fixes
- Increased minimum supported Jenkins version to 2.222.4
- Increased minimum supported Snyk CLI version to 1.500.0
- NodeJS and NPM installations are no longer required to run the step, though you may still need them to test your NodeJS-specific projects
- All Monitor and stderr output are now forwarded to Console Output and *.debug files are no longer generated
For more info on how to install and use the plugin, see the instructions in the plugin's public repo page.