Snyk

Snyk System Scanning integration

This CLI is able to sync asset, scans and vulnerabilities from a folder containing Snyk files.

• snyk - Import a folder of Snyk.xlsx files and sync assets, vulnerabilities and scans to RegScale.

Snyk Processing Workflow

The CLI will process each Snyk file and load assets, vulnerabilities and scans to RegScale.

• import_snyk Import Snyk.xlsx scans and assets to RegScale

Required parameters

• regscale_ssp_id The ID number from RegScale of the System Security Plan, required.

• folder_path The full folder path where the Snyk.xlsx files are located.

Additional Information:

The CLI provides detailed logging throughout the process to indicate progress and to provide troubleshooting in case of issues.

File Format

Below are the expected columns of a Snyk file:

• ISSUE_SEVERITY
• PRIORITY_SCORE
• PROBLEM_TITLE
• CVE
• CWE
• PROJECT_NAME
• PROJECT_URL
• EXPLOIT_MATURITY
• AUTOFIXABLE
• FIRST_INTRODUCED
• PRODUCT_NAME
• ISSUE_URL
• ISSUE_STATUS_INDICATOR
• ISSUE_TYPE

Example Commands

Import Snyk scans to SSP #16 in RegScale using the files located in the snyk_scans folder.

• regscale snyk import_snyk --regscale_ssp_id 16 --folder_path /home/bryan/Sync/snyk_scans