Product Updates

We are excited to announce that on Wednesday, September 6th, we will officially launch GA support for Swift and Scala, enabled for all customers. This milestone follows substantial improvements driven by valuable feedback from customer support tickets, calls, and improvements through benchmark applications and open-source repositories.

For customers with Swift or Scala code, please anticipate a potential increase in issues.

If you have any questions, please reach out to your account teams.

We're excited to share that Snyk now supports testing CycloneDX SBOMs for vulnerabilities through a set of async APIs.

Right now this feature is in open beta and support is limited to the npm and Maven ecosystems. Support for additional ecosystems and SPDX are coming soon.

To learn more, check out the API docs and user docs. We look forward to hearing your feedback, so please don't hesitate to reach out to your account team.

The scheduled maintenance on Sunday, September 3rd from 14:30-15:30 UTC has been completed successfully. Snyk's US based instance is now available. More details about the maintenance can be found at status.snyk.io.

As part of our ongoing commitments to improve the performance and stability of Snyk, we'll be performing scheduled maintenance of our systems on Sunday, September 3rd during 14:30-15:30 UTC. You can check status.snyk.io for the latest status.

During this time, Snyk will be completely unavailable for all customers in the US based instance (app.snyk.io) for up to 1 hour. After the maintenance has been completed, all functionality will return and all historical data will be available. We apologize for any inconvenience this may cause.

Since September 2020, Snyk has provided plugins for the JetBrains family of IDEs – IntelliJ, WebStorm, Android Studio and more – so developers using these tools have Snyk’s world-class developer-first security tooling at their fingertips.

A Commitment to Compatibility

As developers ourselves, we understand the significance of having a seamless and efficient coding experience, and we are committed to ensuring that our JetBrains plugins align with the latest advancements in the JetBrains ecosystem. To achieve this, we have decided to align our plugins' supported versions with those officially supported by JetBrains. This alignment is crucial to maintaining stability, functionality, and performance in your coding environment.

Supported IntelliJ Versions

Moving forward, our plugins will exclusively support versions of JetBrains IDEs that are also supported by JetBrains. This means that our plugins' features, updates, and optimizations will be guaranteed to work flawlessly on these officially endorsed versions. We believe that by synchronizing our efforts with JetBrains' own support roadmap, we can provide you with an unparalleled coding experience.

While we strive to ensure compatibility with officially supported JetBrains versions, we understand that some of our users might continue to utilize older, unsupported versions. While our plugin might continue to function on such versions, we cannot guarantee the same level of reliability and performance as on the officially supported releases. Older versions of our plugin are available for download on the JetBrains Marketplace.

For the best experience with our plugins, we strongly recommend that you always use the latest version of the IDE supported by JetBrains. This approach not only ensures optimal performance but also allows you to benefit from the latest features and security enhancements provided by both JetBrains and our plugin.

Support When You Need It

If you encounter any difficulties while using our JetBrains plugins, we encourage you to first ensure that you are using a supported version of the IDE. If problems persist, please don't hesitate to reach out to our dedicated support team. We are here to assist you and resolve any concerns you may have.

Thank you for being a part of our journey towards secure coding greatness!

As part of our ongoing efforts to improve performance and reliability of Snyk, we’ve made some changes to the database infrastructure behind the Dependencies tab UI and v1 List all dependencies API.

All requests will now be served by a read replica, rather than the primary database. Moving read-intensive APIs like this one dedicated database infrastructure helps ensure that our systems remain stable.

When importing a Project, it's expected that changes will be reflected in the Dependencies tab and API after 10 seconds. You should not notice this change on your end, and we expect the impact on your usage of Snyk to be negligible.

Over the next two weeks, we continue to enhance Snyk Code. As a result, the following improvements will be implemented:

• PHP, Go: Improving support for hardcoded-type rules, specifically CWE-798, CWE-259, and CWE-547. Customers should expect more issues

• Javascript: Improving React and Nest.js support. Customers should expect more issues

• Java, Scala, Kotlin: Implementing support for Jooq library. Customers should expect more issues

• Ruby: Implementing sanitizers for ActiveRecord. Customers should expect similar or fewer issues

• Java, C#: Implementing regex-style sanitizers. Customers should expect similar or fewer issues

If you have any questions, please reach out to your account teams.

On Monday, August 28th, we’re rolling out two exciting features to enhance your Snyk Code experience.

First, after months of development, thorough research, and valuable customer feedback, we're thrilled to announce that VB.NET will now be available in Open Beta.

Second, we're empowering our customers to explore the potential of additional languages – VB.NET, Kotlin, Swift, and Scala – through Snyk Preview. Snyk Preview is a feature that allows you to experiment with upcoming language support and features. To access Snyk Preview, log into app.snyk.io and navigate to Settings > Organization Settings > Snyk Preview.

Rest assured, these changes will not impact your existing issues. If you already use beta languages, your current settings will seamlessly carry over to Snyk Preview. For those who haven't yet opted into beta languages, Snyk Preview will have the default setting turned off. We encourage you to enable them and share your thoughts with us!

If you have any questions, please reach out to your account teams.

We are pleased to announce that Snyk Container can now scan and identify vulnerabilities in Chainguard Images and the Wolfi (un)distribution.

Scanning can be performed using the Snyk Container CLI, the Snyk Kubernetes Monitor integration, and the container registry integrations.

Base image recommendations and auto detection will be available in the near future.

See all distributions supported by Snyk Container here. If you have any questions or feedback, please contact us.

We've made a change to how we model Group Admin's roles in terms of the Orgs within their group. Previously they would always be explicitly assigned the Org Admin role for every single Org in their Group. Now this is no longer explicit, but implied by the fact that they have the Group Admin role. There is no change in their capabilities because of this, and no action is required. The only noticeable difference will be that they no longer appear on the list of Org members. We have also made the equivalent change for Service Accounts which were assigned the Group Admin Role.

Please contact support or your account representative if you have any questions or concerns.