search

aws / aws-cdk

The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code
https://aws.amazon.com/cdk
Apache License 2.0
11.7k stars 3.93k forks source link

(Snyk): CodePipeline integration with Snyk #16232

Closed s1mrankaur closed 1 year ago

s1mrankaur commented 3 years ago

How to use CDK to have Snyk as a target action that is now available as an Action directly in CodePipeline as shown here: https://snyk.io/blog/automate-vulnerability-scanning-in-aws-codepipeline-with-snyk/

skinny85 commented 3 years ago

Thanks for opening the issue @s1mrankaur! Looks like this will be a very simple action to implement. Contributions are welcome, as always 😉.

sholtomaud commented 2 years ago

was there a cdk-sample that documented how to automate this integration with auto key/token regeneration?

sholtomaud commented 2 years ago

KickinMhl says "@aws-cdk/aws-codepipeline-actions doesn't seem to have a method to create the action that I am able to create in the console." https://stackoverflow.com/questions/71257220/codepipeline-snyk-action-via-cdk

Can we have a CDK action method to match the aws console action method?

skinny85 commented 2 years ago

@sholtomaud you should be able to create your own Action class that implements this integration. Look for details how to do it in this issue: https://github.com/aws/aws-cdk/issues/2516.

sholtomaud commented 2 years ago

Rather than writing a custom action class, is there an AWS native way to do DevSecOps? Snyk looks great but I prefer using 100% aws native options so is there a native option that replaces Snyk that I'm not aware of?

github-actions[bot] commented 1 year ago

This issue has not received any attention in 1 year. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.