Prioritizing issues with Snyk Essentials and Snyk AppRisk
Product Training
The Issues interface, accessible from Group and Organization level, provides a centralized interface for prioritizing issues across projects or organizations. Use application context, business context, and security intelligence from the Snyk database to prioritize issues quickly and effectively.
After filtering the issues, you can export them, investigate further, create tickets from the individual issues, or manage the issues as needed.
Requirements for using Issues
- Snyk Enterprise customer
- Group Viewer role for Group-level access or Org Collaborator role to access from the Org-Level
Video: 4m53s
If you have purchased Snyk AppRisk, navigate to the Issues menu (either at the Group or Organizational level) for runtime risk factor insights that can help address several questions related to shifting security left during the development process.
- What to fix, where to fix, or where did it come from?
- What issues have the highest risk and are found in applications that are actually deployed?
- Is the application publicly accessible or is it an issue in the operating system you're running it on?
- Are the packages loaded?
This is achieved by integrating runtime sensors, such as Snyk Runtime Sensor, or a third-party tool like Dynatrace, Sentinel One, and so on. These integrations provide insights on whether the container is deployed, public-facing, and even if a package was loaded, if supported. This information can be used to filter and focus issues on high-risk items.
Requirements for Runtime Insights
- Snyk Enterprise customer with Snyk AppRisk
- Group Viewer role for group-level access to Issues or Org Collaborator role to access from the Org-Level
- Evidence graphs are only available when Issues is accessed from the Group level menu and have Group Viewer role
- Setup Insights for Kubernetes.
- See Documentation
- To use loaded package metrics, you must integrate with a supported third-party runtime or the Snyk Runtime Sensor. See documentation for more information.
- Scanning your images with Snyk Container
- Tags set in Snyk with the appropriate format on related elements like the open source, code, and container projects.
Video: 7m18s
Issues has a tab to Set up Insights. This tab is important to be able to troubleshoot and understand why a resource may be appearing or not.