Find Vulnerabilities In Your Code With Snyk

[@THOTHO-ie5lz]

Might be worth a while to create a picture/map of where infra. type scanner sit (eg. among static and dynamic code scanners ) . So the viewer dont simply think synk is all they ever need to defend against cyberattack on their code/app.

[@technicolourmyles]

I'm writing my first Flask app right now, what other scanners/tests should I run on my code to check for vulnerabilities? Thank you!

[@perrybj39]

I'm soooo grateful for your amazing Chanel 👏!

[@njain1985]

Can I ask what tool are you using for recording and for editing your video? It's really professional work, Tim.

[@nicholas_obert]

As for dependency vulnerabilities scanning, there's already the GitHub-built-in Dependabot. It scans your repos and sends the fixes as pull requests, plus sends you an email warning you about that security issue. I can't remember whether Dependabot is available also for non-pro GitHub accounts. Anyway, if you are a student you can get GitHub pro for free (and countless other benefits) with their student developer pack.

[@LiranTal]

Just to highlight, Snyk is free for open source too, and even for private projects :-)

[@brantechsyt6130]

Great tutorial tim!

[@acid666rain]

Super! Thank you so much!

[@sohammarik4159]

Hey Tim, have you used SonarQube as an alternative? It would be great if we could have something on a comparison between Snyk and SonarQube too!

[@varunvenugopal]

But it does report lot of false positives better to use other commercial tools if really concerned about the actual vulnerabilities in the source code, but yeah maybe good for smaller projects but not really for bigger projects which has lot of call graphs involved , also it does miss lot of true positives tooooo

[@aarjavjain2675]

Hey Tim can you make another flask blog tutorial?

[@michealcronin5094]

Thanks bro, I learned a lot

[@tee8786]

So cool! Love this!

[@muhammadanique2256]

As a Django developer , do I really need to get into this? I just keeping getting into things without totally being an expert in any of it. Feels like I can skip this.

[@THOTHO-ie5lz]

Well, you would want to stay competitive against other developers equiped with "ops" and "sec" skills set( dev/ope/sec).

[@amjads8971]

Is it free / open source ?

[@R-Kannada-DevOps]

How to scan running docker container

[@supertenchoo4271]

Tim why you choose python over many language

[@AchwaqKhalid]

It's also available for *VSCode* too 🖥️

[@ko-Daegu]

doesn't work the extension is trash

[@dhruvbhatia5645]

Hey tim

[@huyilanalana8393]

Great job. How can I contact you pls?

[@helluci6449]

Cover says "vunerabilities"

[@deadchannel7637]

Can you make a video about making telegram bot please ❤️❤️❤️

[@shushmatalwadker8323]

Thankssssssssss

[@vibewithdan]

Vit Raid

[@solarctp]

yo

[@zachfenton608]

This is awesome. My best friend talks yo me about the importance of cyber security. Really good tool.

[@gshap1258]

I'm interviewing for a job in Snyk. Can you recommend what I should review for the technical interview?

[@SkyFly19853]

And I was wondering about it since they found malicious code in some Python repos recently...

[@sebscripts]

I have the POWER! Im the 1k like, Pin me

[@rekhasurya3536]

Hope Tim likes this comment 😊 Love your content btw Tim!

[@vinhtannguyen4960]

give me your source code

[@rudro314]

Very good topic

[@eduardomunhoz1581]

subtitles are wrong, whenever you say the name of the program the subtitles write "sneak" instead of "snyk"

[@tcgvsocg1458]

Thx a lot for all...bad summer happy viewer thx a lot tim

[@courtneyg3300]

Is Tim available for hire?

[@utkarshp1108]

Tim you are very honest

[@njain1985]

Great tute, Tim! So smooth and on point.