Snyk provides a feature-rich command line tool for detecting and patching security vulnerabilities in your dependencies. In this video, learn how to use the Synk command line interface by running it against an open source JavaScript project, the Express web application framework, all while making sure the project’s tests still pass.
- [Instructor] Let's take a peak at synk, … and how we can use it to make our projects more secure. … We're working with version 4.15.0 of Express, … which was released back in 2017. … The Express team does a pretty good job … of staying on top of security fixes. … So this walkthrough wouldn't be all that interesting … if we were working with a recent version. … Let's switch the directory where you cloned Express, … and then run npm install. … This should install all the projects dependencies … without any errors. … Next run npm test to make sure that … all of the projects tests have passed. … And there we go, 833 passing tests. … Now we're ready to run the snyk command. … Snyk test shows us that there are five vulnerabilities … across 14 vulnerable paths in our dependency tree. … We can scroll up in the terminal output to see … the details of each vulnerability … and how they can be addressed manually. … Each vulnerability lists specific remediation steps. … For most languages that snyk supports, …
Author
Released
3/28/2019- Code quality metrics and tools
- Exploring code complexity
- Adjusting complexity thresholds
- Analyzing hotspots and churn
- Visualizing code coverage
- Finding duplication
- Securing dependencies
- Maintaining a consistent coding style
Skill Level Intermediate
Duration
Views
Related Courses
-
Agile Software Development
with Shashi Shekhar1h 53m Beginner -
Agile Software Development: Refactoring
with Richard Kasperowski1h 31m Intermediate
-
Introduction
-
1. Code Quality
-
What is code quality?1m 28s
-
-
2. Complexity
-
What is complexity?2m 39s
-
Adjust thresholds3m 36s
-
-
3. Hotspots and Churn
-
What are hotspots and churn?2m 22s
-
-
4. Code Coverage
-
What is code coverage?2m 56s
-
Windows setup2m 9s
-
macOS X setup3m 19s
-
-
5. Duplication
-
What is duplication?2m 10s
-
-
6. Securing Your Dependencies
-
Why secure dependencies?1m 51s
-
Setting up Snyk1m 24s
-
-
7. Consistent Coding Style
-
Why consistent coding style?1m 40s
-
Setting up Flask2m 1s
-
-
Conclusion
-
Next steps36s
-
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.
CancelTake notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.
Share this video
Embed this video
Video: Securing your dependencies with Snyk CLI