Review code-related security findings from Snyk

Preview

This feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. Pre-GA features are available "as is" and might have limited support. For more information, see the launch stage descriptions.

You can view findings received from Snyk in the following places:

• Code Security dashboard in Security Operations console

• Findings page in the Google Cloud console

Before you begin

Configure the Snyk integration with Security Command Center to receive findings. For information about how to set up a Snyk integration, see Send Snyk data to Security Command Center.

Review findings in the Security Operations console

The Code security dashboard in the Security Operations console displays code-related findings received from Snyk.

1. Open the Security Operations console. See information about accessing the Security Operations console.

2. Select Risk > Overview from the navigation, and then select Code Security from the menu.

3. View the Top code vulnerabilities panel that shows the top Critical and High code security findings received by Snyk.

   • For an individual finding, click the finding count to view the Findings page with findings filtered by the corresponding vulnerability and severity.

   • Click View all to view the data in the Findings page in the Google Cloud console .

Review findings in the Google Cloud console

See Review and manage findings in the console for more information about using the Google Cloud console Findings page.

To display only findings received from Snyk, add the following condition to the query: parent_display_name="Snyk for Google Security Command Center (SCC)".