(Snyk): CodePipeline integration with Snyk

[s1mrankaur]

How to use CDK to have Snyk as a target action that is now available as an Action directly in CodePipeline as shown here: https://snyk.io/blog/automate-vulnerability-scanning-in-aws-codepipeline-with-snyk/

[skinny85]

Thanks for opening the issue @s1mrankaur! Looks like this will be a very simple action to implement. Contributions are welcome, as always 😉.

[sholtomaud]

was there a cdk-sample that documented how to automate this integration with auto key/token regeneration?

[sholtomaud]

KickinMhl says "@aws-cdk/aws-codepipeline-actions doesn't seem to have a method to create the action that I am able to create in the console."
https://stackoverflow.com/questions/71257220/codepipeline-snyk-action-via-cdk

Can we have a CDK action method to match the aws console action method?

[skinny85]

@sholtomaud you should be able to create your own Action class that implements this integration. Look for details how to do it in this issue: #2516.

[sholtomaud]

Rather than writing a custom action class, is there an AWS native way to do DevSecOps? Snyk looks great but I prefer using 100% aws native options so is there a native option that replaces Snyk that I'm not aware of?

[github-actions]

This issue has not received any attention in 1 year. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.