Rule Extensions for Snyk Code is now generally available
Rule Extensions for Snyk Code enables users to extend security rules with custom code, including custom sanitizers, to improve accuracy of findings based on project-specific logic. Users can define and manage extensions through the UI or REST API, preview changes before applying, and manage them programmatically at scale.
Extend Snyk Code's security rules with your own code. Add your custom functions to an existing rule so the engine understands your project's specific logic and returns more accurate findings.
Start with custom sanitizers: register your in-house sanitizer functions so Snyk Code recognizes them as valid ways to clean data, and stops flagging the code paths your own security controls already protect.
What you can do
Define and manage custom sanitizers in the in-product UI, with an FQN builder to pinpoint the exact function, or through a public REST API.
Preview the impact of a change in the UI or with the impact-test API before you apply it — see how your findings change before anything reaches your team.
Agent-friendly API: manage and preview rule extensions programmatically, so automation and agents can configure them at scale.
Available to Enterprise customers.
For our closed-beta customers
Thank you for shaping Rule Extensions during the closed beta. There are a few migration steps to complete — please read the documentation.
Source: original entry ↗
More from Snyk
Follow Snyk to get its new changes in your feed and email digest.
Snyk CLI v1.1308.1 released
HTML report output is now available by default without preview features, and project names are consistently displayed in test summaries. This release also patches multiple security vulnerabilities.
Pending ignore requests now visible on Project's Issues page
Issues with pending ignore requests now display a clear "Pending Ignore Request" status on the Issues page and in issue details, with filtering support. The issues API now reports pending as part of an issue's ignore status for programmatic distinction of open, pending, and ignored findings.
Snyk Code October update: improved analysis and more findings
Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.