Find Vulnerabilities In Your Code With Snyk

[@zachfenton608]

This is awesome. My best friend talks yo me about the importance of cyber security. Really good tool.

[@njain1985]

Great tute, Tim! So smooth and on point.

[@acid666rain]

Super! Thank you so much!

[@aarjavjain2675]

Hey Tim can you make another flask blog tutorial?

[@gshap1258]

I'm interviewing for a job in Snyk. Can you recommend what I should review for the technical interview?

[@utkarshp1108]

Tim you are very honest

[@michealcronin5094]

Thanks bro, I learned a lot

[@brantechsyt6130]

Great tutorial tim!

[@perrybj39]

I'm soooo grateful for your amazing Chanel 👏!

[@rekhasurya3536]

Hope Tim likes this comment 😊 Love your content btw Tim!

[@sohammarik4159]

Hey Tim, have you used SonarQube as an alternative? It would be great if we could have something on a comparison between Snyk and SonarQube too!

[@rudro314]

Very good topic

[@nicholas_obert]

As for dependency vulnerabilities scanning, there's already the GitHub-built-in Dependabot. It scans your repos and sends the fixes as pull requests, plus sends you an email warning you about that security issue. I can't remember whether Dependabot is available also for non-pro GitHub accounts. Anyway, if you are a student you can get GitHub pro for free (and countless other benefits) with their student developer pack.

[@LiranTal]

Just to highlight, Snyk is free for open source too, and even for private projects :-)

[@R-Kannada-DevOps]

How to scan running docker container

[@THOTHO-ie5lz]

Might be worth a while to create a picture/map of where infra. type scanner sit (eg. among static and dynamic code scanners ) . So the viewer dont simply think synk is all they ever need to defend against cyberattack on their code/app.

[@technicolourmyles]

I'm writing my first Flask app right now, what other scanners/tests should I run on my code to check for vulnerabilities? Thank you!

[@tee8786]

So cool! Love this!

[@varunvenugopal]

But it does report lot of false positives better to use other commercial tools if really concerned about the actual vulnerabilities in the source code, but yeah maybe good for smaller projects but not really for bigger projects which has lot of call graphs involved , also it does miss lot of true positives tooooo

[@njain1985]

Can I ask what tool are you using for recording and for editing your video? It's really professional work, Tim.

[@tcgvsocg1458]

Thx a lot for all...bad summer happy viewer thx a lot tim

[@huyilanalana8393]

Great job. How can I contact you pls?

[@amjads8971]

Is it free / open source ?

[@supertenchoo4271]

Tim why you choose python over many language

[@muhammadanique2256]

As a Django developer , do I really need to get into this? I just keeping getting into things without totally being an expert in any of it. Feels like I can skip this.

[@THOTHO-ie5lz]

Well, you would want to stay competitive against other developers equiped with "ops" and "sec" skills set( dev/ope/sec).

[@AchwaqKhalid]

It's also available for *VSCode* too 🖥️

[@ko-Daegu]

doesn't work the extension is trash

[@eduardomunhoz1581]

subtitles are wrong, whenever you say the name of the program the subtitles write "sneak" instead of "snyk"

[@courtneyg3300]

Is Tim available for hire?

[@SkyFly19853]

And I was wondering about it since they found malicious code in some Python repos recently...

[@helluci6449]

Cover says "vunerabilities"

[@dhruvbhatia5645]

Hey tim

[@deadchannel7637]

Can you make a video about making telegram bot please ❤️❤️❤️

[@vibewithdan]

Vit Raid

[@shushmatalwadker8323]

Thankssssssssss

[@vinhtannguyen4960]

give me your source code

[@solarctp]

yo

[@sebscripts]

I have the POWER! Im the 1k like, Pin me