Snyk

Developer

Pull vulnerability status from Snyk into your evidence.

what it checks

Snyk checks in Varman

Monitor Snyk projects for dependency and code vulnerabilities. Varman runs 2 checks against Snyk on a schedule and records each result as evidence.

medium severity

The Snyk organization should have at least one project under continuous monitoring.

high severity

Each monitored Snyk project should have zero open High or Critical issues.

how to connect

An admin adds the details below in Varman under Integrations. Secret values are encrypted before they are stored.

API Token: Account settings > General > Auth Token (KEY).
Organization ID: Snyk org settings > Organization ID (a UUID). Checks run against this org.