Native GraphQL Scanning for Snyk API & Web
Snyk API & Web now supports GraphQL as an API target type with security tests for queries and mutations. Schema ingestion is available via URL, file upload, or direct introspection endpoint fetching, with new authentication settings to support GraphQL targets.
We’ve expanded our DAST capabilities by adding GraphQL as a supported API target type in Snyk API & Web. This enables security tests specifically designed for GraphQL operations, including queries and mutations. In addition to schema ingestion via URL or file upload, you can now fetch your schema directly from an introspection endpoint to ensure tests stay up to date. To support these scans, we've also updated our authentication settings to include dedicated options for GraphQL targets.
Source: original entry ↗
More from Snyk
Follow Snyk to get its new changes in your feed and email digest.
Snyk CLI v1.1308.0 released
Introducing HTML report generation for test commands, experimental agent-scan improvements with risk indicators, and substantial reliability fixes for Maven, Gradle, and .NET projects to prevent stack overflows and scanning failures.
ADS installer now available as packaged binary
The Agent Supply Chain Security installer now ships as signed macOS .pkg and Windows .msi packages, eliminating the need for custom scripts and MDM integration. The installer registers scheduled jobs automatically for independent scan execution.
Snyk CLI v1.1307.4 — Studio integration and snyk fix improvements
Snyk CLI v1.1307.4 adds experimental studio command for AI coding tool integration, new filtering flags for snyk fix --agentic mode, improved fix change handling, and fixes an issue where scan type flags could be silently dropped on unified test API.