Snyk Code

Snyk output file (snyk test --json > snyk.json) can be imported in JSON format. Only SCA (Software Composition Analysis) report is supported (SAST report not supported yet).

Sample Scan Data#

Sample Snyk Code scans can be found here.

Default Deduplication Hashcode Fields#

By default, DefectDojo identifies duplicate Findings using these hashcode fields:

• vuln id from tool
• file path