Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
snyk-to-html
Advanced tools
The Snyk JSON to HTML Mapper takes the json outputted from snyk test --json
and creates a local HTML file displaying the vulnerabilities discovered.
First, Install the Snyk JSON to HTML Mapper using npm:
npm install snyk-to-html -g
Alternatively, you can skip this step, clone the repo and run the script locally (using node ./snyk-to-html.js
)
Change directory to your package's root folder, then use of the two ways below to generate the HTML report.
Directly streaming the results to snyk-to-html:
Run the following line to create a file called results.html
:
snyk test --json | snyk-to-html -o results.html
Using a temporary file:
Generate JSON data by running snyk test
and save the output to a file
snyk test --json > results.json
Pass the resulting JSON file to Snyk's JSON to HTML Mapper
snyk-to-html -i results.json -o results.html
Simply open your new file (results.html
above) in a browser, and rejoice.
FAQs
Convert JSON output from `snyk test --json` into a static HTML report
We found that snyk-to-html demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.