Sorry for the delay with this! Snyk is a bit fiddly and I'm not totally sold with the reporting/monitoring and how they work with branches. However they monito

Sorry for the delay with this! Snyk is a bit fiddly and I'm not totally sold with the reporting/monitoring and how they work with branches. However they monitor Docker images which is key for me. If GitHub offered Docker images scanning I wouldn't use Snyk Also Snyk can be put in your merge request process so always nice to tell developers a new or legacy package has a vuln and to try and bump it up