Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

severity other than low does not fail the snyk-test task #12

Open
lpicquet opened this issue Jan 11, 2022 · 1 comment
Open

severity other than low does not fail the snyk-test task #12

lpicquet opened this issue Jan 11, 2022 · 1 comment

Comments

@lpicquet
Copy link

given a build.gradle snippet:

plugins {
...
    id "io.snyk.gradle.plugin.snykplugin" version "0.4"
---
}

snyk {
    arguments = '--all-sub-projects'
    severity = 'high'
    autoDownload = true
    autoUpdate = true
}

given that a high or critical vulnerability exists in my java11 project
when I run ./gradlew snyk-test
then the task should fail
but instead I get the following

Starting a Gradle Daemon, 1 incompatible and 2 stopped Daemons could not be reused, use --status for details

> Task :snyk-check-binary
look for standalone binary
Using Snyk CLI version: 1.821.0 (standalone)

> Task :snyk-test


Testing /home/laurent/workspace/whitepaw...

Organization:      lpicquet
Package manager:   gradle
Target file:       build.gradle
Project name:      whitepaw
Open source:       no
Project path:      /home/laurent/workspace/whitepaw
Licenses:          enabled

✔ Tested 203 dependencies for known issues, no vulnerable paths found.

Next steps:
- Run `snyk monitor` to be notified about new related vulnerabilities.
- Run `snyk test` as part of your CI/test.



BUILD SUCCESSFUL in 2m 44s

@lpicquet
Copy link
Author

If I set the severity to 'low', the task fails as expected

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant