Product Updates

We are pleased to announce two Snyk Open Source bug fixes for Gradle support in the CLI.

With this update CLI support for Gradle will be improved as follows:

• Multiple packages with the same artifactId will be included in the dependency graph correctly.

• platform dependencies will no longer be included in the dependency graph. Platform dependencies are not regular dependencies of the project, and do not result in an artifact. Rather they control the versions of other dependencies, in a similar way to dependency management BOMs in Maven.

How will my scan results change?

Overall, this release should not lead to an increase in vulns or issues.

• artifactId change - we might find more paths in the dependency graph, but the packages and issues should remain the same.

• platform change - potentially fewer issues.

What are the next steps?

The changes are available now in the preview channel of the CLI, and will be included in the stable channel on 14 May 2025.

We are excited to announce that the asset enrichments of the Repository Visibility will be available on April 29th!

A new type of enrichment called Visibility had been added. This provides visibility information for assets of type repository (Public/Private/Internal), which will be introduced as a new column called "Visibility". The main highlights include:

• Allow prioritization/classification of repository assets based on their visibility (Public/Private/Internal).

• Allow enforcement of coverage controls based on the visibility of the repositories.

We are constantly working on providing additional asset context! If you have any repository context that you would like to enrich your assets or have any questions, contact the Snyk Support Team.

We are happy to announce the UI changes of the Snyk Essentials Integration page. While no functionalities have changed, the new UI design clearly indicates that a group-level SCM should be set up to fully leverage Snyk Essentials. Main highlights include:

• Help immediately understand that the critical Group-level SCM integration is not yet configured.

• Better user experience in the Integration Hub at the group-level.

• Smoother onboarding experience to Snyk Essentials through clear and actionable Call-to-Actions (CTAs).

This update will be rolled out on May 5th.

We’re thrilled to announce that Snyk API & Web has a brand new course called “Snyk API & Web - Using the web interface” available at Snyk Learn. 🎉

With this course, you can expect to learn how to configure targets and their settings, initiate scheduled scans, test APIs and web apps, manage findings, learn about asset discovery and take the most out of the reporting tools available.

With Snyk, you can narrow the gap between development, security, and operations by making security an intrinsic part of your development life cycle. Just head over to the course page or search for API & Web in our catalog to start learning today!

For any suggestions, questions or concerns, please reach out to the Snyk support team.

Customers using Snyk Reporting should notice changes to many of our charts and visualizations! Updates include charts that can be more easily downloaded and improvements to colors and data point indexes for easier analysis.

We’ve released hotfix v2.12.2 for our JetBrains IDE plugin.

This update solely ensures compatibility with the IntelliJ 2025.1 release. This hotfix addresses compatibility only; there are no other functional changes or enhancements, so your experience using the plugin will remain the same.

If you have any questions, feel free to reach out to the Snyk support team.

We encourage everyone to upgrade to the latest version!

We’re thrilled to announce Probely is now Snyk API & Web, a next-generation Dynamic Application Security Testing (DAST) & API Security solution! 🎉

Snyk API & Web offers:

• 0.1% false positive rate, evidence-based reporting and detailed instructions on how to fix vulnerabilities, so you can focus on what really matters,

• ways of integrating with your preferred CI/CD tools, issue trackers, and messaging apps,

• customizable scanning configurations, scheduled scanning, partial scanning, scanning behind the login, and configuration of blackout scanning periods,

• ways of showcasing your compliance, by testing against a series of detailed requirement checklists,

• among many others.

Snyk API & Web's powerful security testing engine helps revolutionize the way APIs and web apps are tested, mapping companies’ ever-growing attack surface, automating the scanning of vulnerabilities, and providing quick and detailed fixes for them.

By integrating Snyk API & Web within the rest of Snyk’s portfolio, and leveraging AI capabilities, we thrive where others falter. And this is just the beginning; our ambitious roadmap is paving the way for much more to come!

If you wish to learn more about Snyk API & Web, please visit the Product page and Snyk API & Web course over Snyk Learn.

Once again, Snyk reinforces its commitment to help companies innovate securely and confidently at the accelerated pace the world requires.

For any suggestions, questions or concerns, please reach out to the Snyk support team.

We’ve released a hotfix for our Visual Studio Code IDE plugin (v2.21.1) to address the following issues:

• Improved handling of local certificates in environments configured with a network proxy. This resolves potential failures, such as when the IDE downloads required components.

• Routine enhancements: Incorporates routine enhancements for reliability.

Release notes can be found here.

If you have any questions, feel free to reach out to the Snyk support team.

We encourage everyone to upgrade to the latest version!

Probely's upcoming release (April 22nd) brings forth a new feature for Enterprise customers: Managed reports! 🎉

Managed reports (or Saved reports) allow you to generate PDF reports of findings from multiple targets at the same time, based on a specific search/filter criteria; e.g. you can generate a report of all High findings across all targets from your account or from a specific team!

With this release, all Enterprise accounts should be able to see the Reports button on the top right corner of the Findings page and perform 1 of 3 tasks:

• Generate a new report of the findings listed, taking into account the search and filters applied on the interface

• Save a report that will take into account the search and filters applied on the interface, and that can be automatically emailed based on a set recurrence, or manually downloaded when needed

• Manage previously saved reports, allowing for easier access to previous filters/searches or download of existing reports

For any suggestions, questions or concerns please reach out to the Snyk support team.

We are updating the default landing page after users log into Snyk to surface the most useful insights - easily.

💡 Users with access to group-level reporting and Snyk Essentials will land on the Inventory Overview tab. This includes all users that have the default roles of Group Admin or Group Viewer.

💡 Otherwise, users will land on the org-level Projects tab.

This update will be rolled out on May 29.