3 ms·
Not a huge fan of managing something as critical like this. GitHub has a dependancy management tool and also Snyk is a great addition to our pipeline for code p
by obayesshelton 6y ago
Not a huge fan of managing something as critical like this. GitHub has a dependancy management tool and also Snyk is a great addition to our pipeline for code packages and Docker Images.
Using both in production.
- aaronharnly 6y agoWhat do you like about Snyk above what GitHub provides?
- obayesshelton 6y agoSorry for the delay with this! Snyk is a bit fiddly and I'm not totally sold with the reporting/monitoring and how they work with branches. However they monitor Docker images which is key for me. If GitHub offered Docker images scanning I wouldn't use Snyk Also Snyk can be put in your merge request process so always nice to tell developers a new or legacy package has a vuln and to try and bump it up