Governed ignores with Ignore Approval Workflow
Snyk Code findings can now be suppressed through an Ignore Approval Workflow that requires review, preventing developers from silently ignoring vulnerabilities without security team oversight.
Until now, a developer could suppress a Snyk Code finding on their own — directly in the Web UI or IDE — with no review step.
Suppression happened silently and unilaterally, leaving security teams without a gate on what got ignored.
Source: original entry ↗
More from Snyk
Follow Snyk to get its new changes in your feed and email digest.
Snyk Code October update: improved analysis and more findings
Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.
Snyk CLI v1.1308.0 released
Introducing HTML report generation for test commands, experimental agent-scan improvements with risk indicators, and substantial reliability fixes for Maven, Gradle, and .NET projects to prevent stack overflows and scanning failures.
ADS installer now available as packaged binary
The Agent Supply Chain Security installer now ships as signed macOS .pkg and Windows .msi packages, eliminating the need for custom scripts and MDM integration. The installer registers scheduled jobs automatically for independent scan execution.