The Kubernetes connector for Insights, the agent (kubernetes-scanner) you deploy in your clusters to send workload configuration to Snyk, is reaching end of life.What it did: the connector collected the list of images deployed in your clusters (with their IDs and SHAs) and the configuration of your services, such as networking. Snyk Insights used that information to understand what is deployed and…
We're happy to announce that we now support Python 3.15. Following its release on October 9, 2026, this support is now generally available (GA). You can now scan your Python 3.15 projects using both the command line interface (CLI) and your source control manager (SCM) integrations.
Snyk API & Web now extends its security header, cookie attribute, and SSL/TLS checks to the Extra Hosts of a target. These checks, which include findings such as "HSTS header not enforced" and "Missing Content Security Policy header", already run against one endpoint of the target URL. As of today, each scan also runs them against one endpoint of every Extra Host configured on the target.
We are pleased to announce Snyk CLI release, v1.1308.3Following the compromise of eMudhra intermediate certificate authorities, we strongly advise all customers to upgrade to Snyk CLI v1.1308.3 or later.This release includes a security update that blocks trust in the affected certificates. Earlier versions may accept forged certificates, potentially allowing an attacker able to intercept network t…
We are pleased to announce Snyk CLI release, v1.1308.2This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:.NET scans no longer fail with NETSDK1067 when SelfContained=true is set in the build environment.snyk test --source-dir now returns a clear validation error when used wit…
What Changed?You can now set how often Snyk scans your repositories for secrets using Repo Monitor Configuration . In "Inventory -> repository -> Settings" or in bulk via "Inventory -> Configure Monitoring", choose Daily, Weekly or Never for Secrets. Set it for a single repository or for many repositories at once.Secrets also now appear in Inventory. In the All Assets view, each repository shows i…
We are pleased to announce Snyk CLI release, v1.1308.1This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:snyk test --html and --html-file-output no longer require preview features to be enabled, making HTML reports available to everyone.The project name is now consistently di…
What Changed?When you submit an ignore request under Ignore Approval Workflow, the issue now shows a clear "Pending Ignore Request" status directly on the Project's Issues page and in the issue details — so you can see at a glance that a request is awaiting review, instead of it looking like any other open issue.You can also filter your Issues list to show only findings with a pending ignore reque…
This update will be available on October 26, 2026.Snyk Code reports significantly more findings in this update. Affected projects will report the additional findings on their next scan.Snyk Code now analyzes more deeply and more accurately in Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby.Go, TypeScript and JavaScriptSnyk Code reads the Project's own configuration to resolve im…
We are pleased to announce the latest stable Snyk CLI release, v1.1308.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:HTML Reportssnyk test, snyk code test and snyk secrets test can now generate an HTML report.…
The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page. The installer registers a scheduled job on the machine, so Agent Supply Chain Security scans run on their own schedule without needing MDM.What The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page in Evo. Why Deployment no longer means wrapping a…
We are pleased to announce Snyk CLI release, v1.1307.4This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:New experimental snyk studio command that sets up Snyk Studio in supported AI coding tools (Cursor, Claude Code, Codex, Copilot, Gemini, Kiro, and Windsurf), so the code t…
Snyk Code priority scores dropped by up to 200 points on August 17, 2026, for findings whose rule had a fix example.What changedA finding used to earn 200 of the 1,000 available priority score points when Snyk held a fix example for its rule. The August 17, 2026 release retired fix examples, and the scoring factor went with them.WhyFix-example availability describes Snyk's content coverage. It say…
Atlassian ends support for Atlassian Connect in December 2026. Snyk for Jira has been rebuilt on Forge, Atlassian's current cloud app platform, with all of the same functionality.No action is required. New installations use the Forge version from September 30, 2026, and existing installations will be migrated during October. Permissions, configuration, ticket creation, and existing Jira issues all…
You can connect any MCP client, such as Claude, Codex or Cursor, to Evo and ask about your AI estate from the agent you already work in. What's new. You can now:Ask what AI assets Evo has discovered across your code, your developer machines, and your pentest targetsSee how those assets connect, for example which MCP servers an agent uses or which findings came from a targetRead your policies and t…
We are pleased to announce Snyk CLI release, v1.1307.3This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:snyk test now reports an unreadable .snyk policy file as SNYK-POLICY-0002 with a message identifying the problem, instead of an unspecified error.snyk test --all-projects…
Snyk Container will begin reporting vulnerabilities from the Go standard library for all customers. Scans of container images built from Go binaries identify the standard library version the binary was compiled with and report known vulnerabilities against it.Affected images gain a new stdlib dependency in the dependency graph, versioned to the Go release used for the build, for example stdlib@1.2…
Snyk API & Web now lets you upload your organization's internal Certificate Authority (CA), so the certificates it issues are trusted the same way as publicly issued certificates.What's newMany enterprises operate their own internal CA to issue certificates for both internal tools and internet-facing applications. Although these certificates aren't signed by a public CA, they should still be inclu…
We are pleased to announce Snyk CLI release, v1.1307.2This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Removed an unused experimental feature.Fixed vulnerabilities: CVE-2026-84445If you have any questions, feel free to reach out to the Snyk support team. We encourage everyo…
We are pleased to announce Snyk CLI release, v1.1307.1This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:snyk test again reports SNYK-CLI-0008 and exits with code 3 when a repository contains no supported manifest files, instead of a generic SNYK-CLI-0000 with exit code 2. sn…
The "What"Repo Content Sync keeps your Snyk Projects aligned with what your repositories actually contain. When a change is merged to a branch Snyk monitors, Snyk creates and begins monitoring Projects for newly added manifest, Dockerfile, and configuration files, and deactivates the Projects whose files were removed. A file that is moved or renamed is picked up at its new path, and the Project at…
We are pleased to announce the latest stable Snyk CLI release, v1.1307.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:Secretssnyk secrets test now supports exclusions — add files or paths to the exclude section…
Starting August 18, 2026, a user's Evo data is limited to the Snyk Organizations they can read.Until now, everyone with access to Evo saw every repository, asset, and issue in the Tenant. Evo now reuses your existing Snyk Organization hierarchy, so there is nothing new to model and no migration to run. Nobody loses access until an administrator changes their role.What's new:Tenant Viewer now grant…
This update is available on September 14, 2026. It improves coverage and precision across Snyk Code: template files are analyzed, Java framework and library support is extended, detection gaps are closed in six languages, and .gitignore no longer hides committed files from analysis.Template filesSnyk Code analyzes template files and follows data from your application code into the template. Cross-…
Starting August 17, 2026, Evo by Snyk uses a rebuilt model risk score to evaluate the AI models discovered in your organization.The previous Risk Index is replaced by a single score from 0–1,000 that combines attack success rate with the potential impact of a successful attack, tested against categories including prompt injection, data exfiltration, and insecure code generation. The result is a sc…
The "What"Snyk is introducing Snyk Assist — an AI-powered support and guidance assistant available directly inside the Snyk UI.Snyk Assist answers product, setup, and troubleshooting questions in plain language, grounded in Snyk's own documentation, release notes, and support knowledge articles. It can also retrieve read-only information about your current organization and group, and open a suppor…
Snyk is rolling out a redesigned navigation experience! The classic sidebar — which listed every page across Tenant, Group, and Organization scopes at once — is replaced by a single breadcrumb bar at the top that lets users switch scope in one click via per-level drop-downs. The left sidebar is condensed to core areas only (Analytics, Inventory, Projects, Issues, Policies, Settings), with all sett…
We are pleased to announce Snyk CLI release, v1.1306.4This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Clearer error messages when the CLI cannot reach a configured proxy. Failures now report the proxy URL the CLI attempted to use, with credentials redacted, along with the…
We are pleased to announce Snyk CLI release, v1.1306.3This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Updates bundled dependencies to remediate known vulnerabilities, keeping the CLI current for teams with supply chain policies on the tools running in their pipelines.Fixed…
Snyk API & Web now supports NTLM v2 authentication for Web targets. Security teams can configure NTLM credentials (username, password, domain, workstation) directly in the target settings, enabling authenticated scans of Windows-authenticated applications without requiring separate tools.