Snyk AppRisk Pro - Insights Overview
Product training
Insights, accessible from the Group or Organization level of the main menu, helps solve several questions asked when shifting security left as part of the development process:
- What to fix , where to fix, or where did it come from?
- What issues have the highest risk and are in applications that are actually deployed?
- Is the application publicly accessible or is it an issue in the operating system you're running it on?
- Snyk Enterprise customer with Snyk AppRisk Pro and Snyk Container
- Group Viewer Role for Group Level Access to Insights
- or Org Collaborator Role to access from the Org Level
- Evidence graphs are only available when Insights is accessed from the Group level menu and have Group Viewer role
- or Org Collaborator Role to access from the Org Level
- Insights Connector for Kubernetes.
- Scanning your images with Snyk Container
- Tags set in Snyk with the appropriate format on related elements like the open source, code, and container projects.
INFO
Tagging Format
The tag will be in the form of component=pkg:__location__@__branch__ where __Location__ is the repository location i.e. github, specific to the project you are testing and the __Branch__ specific to the project you are testing.
Example: component=pkg:github/my-org/repo-a@main
For more information on tagging, see:
- Our docs page
- Snyk Tags tool for tagging at scale: https://github.com/snyk-labs/snyk-tags-tool#component-tags-for-snyk-insights
The following videos discuss key considerations and initial workflows for setting up and using Insights:
- Video - 2m23s
- Video - 8m57s
Insights has a tab to Set up Insights. This tab is important to be able to troubleshoot and understand why a resource may be appearing or not.
What to learn next?
NEWInsecure plugins for LLMs
Learn how an attacker can exploit insecure plugins in LLM-based applications and compare them to similar attacks like resource exhaustion with examples.
AI/ML
NEWSnyk AppRisk Pro - Using Application Analytics (Tenant->Analytics->Applications)
Snyk AppRisk Application Analytics helps organizations understand coverage, potential gaps and trends across the applications they own. This lesson provides an overview.
General
NEWSnyk AppRisk Pro - Secrets detection coverage with Nightfall AI
Learn how to configure Snyk AppRisk with Nightfall AI and utilize the data for powerful policies, coverage validation, and reporting.
General