You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
*[How ignores work for Projects imported using an SCM and the CLI](manage-risk/prioritize-issues-for-fixing/ignore-issues/how-ignores-work-for-projects-imported-using-an-scm-and-the-cli.md)
719
719
*[Exclude files and ignore issues FAQs](manage-risk/prioritize-issues-for-fixing/ignore-issues/exclude-files-and-ignore-issues-faqs.md)
720
-
*[Consistent Ignores for Snyk Code Early Access](manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/README.md)
720
+
*[Consistent Ignores for Snyk Code](manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/README.md)
721
721
*[Consistent Ignores for Snyk Code API](manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/api.md)
722
722
*[Consistent Ignores for Snyk Code CLI](manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/snyk-cli.md)
723
723
*[Consistent Ignores for Snyk Code IDE](manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/snyk-ide.md)
Copy file name to clipboardExpand all lines: docs/manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/README.md
+6-12Lines changed: 6 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,12 +5,10 @@
5
5
6
6
Snyk Code Consistent Ignores is in Early Access and available only with Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
7
7
8
-
To make sure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review [Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md)sections.
8
+
To ensure Consistent Ignores meets your needs and requirements, review the [FAQ](consistent-ignores-for-snyk-code-faqs.md)section.
9
9
{% endhint %}
10
10
11
-
Snyk Code Consistent Ignores helps your teams focus on important tasks by filtering out distractions. 
12
-
13
-
It makes sure that once an ignore is created, it is consistently respected regardless of how and where the test is run and what branch is being tested. 
11
+
Snyk Code Consistent Ignores helps your teams focus on important tasks by filtering out distractions. It ensures that once an ignore is created, it is consistently respected regardless of how and where the test is run and what branch is being tested. 
14
12
15
13
By filtering out false positives, inapplicable threats, and accepted risks, your security teams can prioritize fixing real problems, and developers can code without interruptions. 
16
14
@@ -39,9 +37,9 @@ To create, edit and remove ignores, you need to have a user role assigned with I
39
37
40
38
## Convert Project-scoped ignores to asset-scoped ignores
41
39
42
-
{% hint style="info" %}
43
-
**Before you begin**
40
+
### Conversion setup
44
41
42
+
{% hint style="info" %}
45
43
If you're new to Snyk or with Snyk Code Projects, you can skip this step as there are no existing ignores to be converted.
46
44
{% endhint %}
47
45
@@ -63,9 +61,9 @@ To convert the issue from a Project-scoped to an asset-scoped ignore, select **I
63
61
64
62
You can manage ignores proactively using group-level Snyk Code security policies. As a general rule, you can apply ignore policies when you identify a recurring need to apply similar individual ignores. 
65
63
66
-
To manage the ignores through security policies, Snyk Code Consistent Ignores need to be enabled at the Group level by your Snyk team. You will not require [conversion](./#convert-project-scoped-ignores-to-asset-scoped-ignores) for any previously applied Group level policy ignores.
64
+
To manage the ignores through security policies, Snyk Code Consistent Ignores need to be enabled at the Group level by your Snyk team. You do not require [conversion](./#convert-project-scoped-ignores-to-asset-scoped-ignores) for any previously applied Group level policy ignores.
67
65
68
-
Policies configured to ignorebased Project attributes will not result in ignores being applied in Snyk CLI and IDE settings where a Snyk Project is not available.
66
+
Policies configured to ignore-based Project attributes do not result in ignores being applied in Snyk CLI and IDE settings where a Snyk Project is not available.
@@ -76,15 +74,11 @@ Policies configured to ignore based Project attributes will not result in ignore
76
74
77
75
You can take action from Project issues, but Snyk will apply any ignores to the underlying asset-scoped findings that can span across Snyk Projects, integrations, and branches.
78
76
79
-
{% hint style="info" %}
80
-
**Before you begin**
81
-
82
77
When you create, modify, or delete an ignore, you must [retest the Project](../../../../scan-with-snyk/snyk-code/manage-code-vulnerabilities/#retesting-code-repository) to update the issue status. 
83
78
84
79
An indicator at the top of the Project page will notify you if a retest is needed to capture policy or ignore updates. 
85
80
86
81
Project retests typically occur on a nightly or weekly basis, but you can also retest manually.
Snyk Code Consistent Ignores is in Early Access and available only with Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
7
7
8
-
To make sure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review [Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md)sections.
8
+
To ensure Consistent Ignores meets your needs and requirements, review the [FAQ](consistent-ignores-for-snyk-code-faqs.md)section.
9
9
{% endhint %}
10
10
11
11
You can manage ignores individually through the [Snyk Policies API (REST)](https://apidocs.snyk.io/version=2024-10-14~experimental?version=2024-10-15#get-/orgs/-org_id-/policies). 
12
12
13
13
The SARIF output from Snyk CLI contains the `snyk/asset/finding/v1` identifier used to manage ignores at the start of the Early Access program. 
14
14
15
-
This API leverages the `snyk/asset/finding/v1` identifier and not the `issueId` used by the legacy ignores API. You should prepare to migrate any scripts or automation that rely on the legacy ignores API to the new policy API.
15
+
This API leverages the `snyk/asset/finding/v1` identifier and not the `issueId` used by the legacy ignores API. Consider migrating any scripts or automation that rely on the legacy ignores API to the new policy API.
Copy file name to clipboardExpand all lines: docs/manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/consistent-ignores-for-snyk-code-faqs.md
+42-6Lines changed: 42 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,11 +4,47 @@
4
4
**Release status**
5
5
6
6
Snyk Code Consistent Ignores is in Early Access and available only with Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
7
-
8
-
To make sure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review [Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md) sections.
9
7
{% endhint %}
10
8
11
-
This FAQ section addresses common concerns about the Snyk Code Consistent Identity Early Access program. You can share feedback with your Snyk account team about these items. Snyk will consider all suggestions but implementation or addressing these issues is not guaranteed for the upcoming GA version.
9
+
This FAQ section addresses common concerns about the Snyk Code Consistent Identity Early Access program. You can share feedback about these items with your Snyk account team. 
10
+
11
+
## Snyk Code CLI Upload 
12
+
13
+
Snyk Code Consistent Ignores does not support ignores for Projects associated with CLI Upload. 
14
+
15
+
If you activate a Snyk Organization with Snyk Code CLI Upload Projects, ignores for any subsequent scans using `snyk code test --report` are not taken into account. All resulting Projects and associated issues are shown as open. Additionally, any pre-existing [Project-scoped ignores will not be converted to asset-scoped ignores](./#convert-project-scoped-ignores-to-asset-scoped-ignores). 
16
+
17
+
<figure><imgsrc="../../../../.gitbook/assets/Ignored-issue-using-legacy-system.png"alt=""><figcaption><p>Snyk Code Consistent Ignores limitation in CLI upload</p></figcaption></figure>
18
+
19
+
### Recommendation
20
+
21
+
If you're using Snyk Code CLI Upload Projects, consider postponing Consistent Ignores enablement until these workflows are supported.
22
+
23
+
If you want to try out Snyk Code Consistent Ignores, you can enable it for Organizations that do not have Snyk Code CLI Upload Projects.
24
+
25
+
## Finding identifier added to Issues API and Reporting 
26
+
27
+
There are no changes to the [Group](https://apidocs.snyk.io/?version=2024-10-15#get-/orgs/-org_id-/issues) and [Organization](https://apidocs.snyk.io/?version=2024-10-15#get-/orgs/-org_id-/issues) level Issues API endpoints or Reporting (issue reporting).
28
+
29
+
An additional attribute containing the finding identifier will be added to these API endpoints and issue reports in the coming months. You can use this to assist you in converting from Project-scoped to asset-scoped ignores, especially at scale or if you have competing ignores across different Projects.
30
+
31
+
## Bulk ignore conversion
32
+
33
+
You need to migrate pre-existing Project-scoped ignores to asset-scoped ignores manually on the Projects page.
34
+
35
+
You may be able to script some of the migration using the CLI, as the CLI output returns both the `issueId` value used in the v1 ignores API, and the `snyk/assets/finding/v1` ID used to manage asset-scoped ignores. The bulk ignore conversion needs to be done at the repository level. 
36
+
37
+
### Recommendation
38
+
39
+
If you need support with the migration, reach out to your Snyk account teams or request time with Snyk product management to share feedback on what will make this process easier for you.
40
+
41
+
### Support for Bitbucket Data Center/Server <ahref="#support-for-bitbucket-data-center-server"id="support-for-bitbucket-data-center-server"></a>
42
+
43
+
When testing a Bitbucket Server repository, the ignores created are not respected across Projects imported through an SCM integration, Snyk CLI, and IDE.
Postpone activating Snyk Code Consistent Ignores until Bitbucket Data Center/Server is fully supported.
12
48
13
49
## Ignore limitations outside my Snyk Organization
14
50
@@ -18,7 +54,7 @@ Depending on feedback during the Early Access period, we may offer a broader sco
18
54
19
55
## Existing DeepCode inline ignores (legacy) are not supported or migrated
20
56
21
-
Deepcode inline ignores are a legacy feature that is only available for certain customers. If you have pre-existing Deepcode inline ignores, Snyk will remove them from test results. They will not be marked as `Open` or `Ignored`.
57
+
Deepcode inline ignores are a legacy feature that is only available for certain customers. If you have pre-existing Deepcode inline ignores, Snyk removes them from the test results. The results are not marked as `Open` or `Ignored`.
22
58
23
59
### Recommendation
24
60
@@ -39,7 +75,7 @@ Snyk may fail to complete testing after you rename a repository, depending on wh
39
75
1. Delete all targets associated with that repository.
40
76
2. Reimport the newly renamed repository.
41
77
42
-
Previous Consistent Ignores will apply to the newly named repository. New clones in IDEs/CLI that reference the new name will also take into account ignores, even with the old git URL, in case some developers haven't updated their remote repositories.
78
+
Previous Consistent Ignores are applied to the newly named repository. New clones in IDEs/CLI that reference the new name take into account the ignores, even with the old git URL, in case some developers haven't updated their remote repositories.
43
79
44
80
## Granular ignores
45
81
@@ -49,7 +85,7 @@ If you have specific use cases that require this functionality, reach out to you
49
85
50
86
## Project attribute policies
51
87
52
-
Policies defined against Project attributes will continue to work within Snyk Projects where the attributes match. However, they will not apply across the repository to other Projects or in Snyk IDE, CLI, or PR checks flows. To apply policies across Projects and branches for the same repository, define them against Organizations.
88
+
Policies defined against Project attributes will continue to work within Snyk Projects where the attributes match. The policies are not applied across the repository to other Projects or in Snyk IDE, CLI, or PR checks flows. To apply policies across Projects and branches for the same repository, define them against Organizations.
Copy file name to clipboardExpand all lines: docs/manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/known-limitations.md
+5-1Lines changed: 5 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,11 +1,15 @@
1
+
---
2
+
hidden: true
3
+
---
4
+
1
5
# Known limitations
2
6
3
7
{% hint style="info" %}
4
8
**Release status**
5
9
6
10
Snyk Code Consistent Ignores is in Early Access and available only with Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
7
11
8
-
To make sure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review [Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md) sections.
12
+
To ensure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review the[Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md) sections.
9
13
{% endhint %}
10
14
11
15
The following items are planned to be delivered in the months following the Early Access program.
Copy file name to clipboardExpand all lines: docs/manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/snyk-cli.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@
5
5
6
6
Snyk Code Consistent Ignores is in Early Access and available only with Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
7
7
8
-
To make sure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review [Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md)sections.
8
+
To ensure Consistent Ignores meets your needs and requirements, review the [FAQ](consistent-ignores-for-snyk-code-faqs.md)section.
9
9
{% endhint %}
10
10
11
11
Ignores are taken into account in the Snyk CLI when `snyk code test` is run.
@@ -32,9 +32,9 @@ The CLI display output hides ignored results by default when you run `snyk code
32
32
33
33
## View ignores in Snyk CLI
34
34
35
-
After running `snyk code test`, the CLI will display a hint about using the `--include-ignores` parameter to show ignored results.
35
+
After running `snyk code test`, the CLI displays a hint about using the `--include-ignores` parameter to show ignored results.
36
36
37
-
Running `snyk code test --include-ignores`will display ignored results with their metadata below the open results.
37
+
Running `snyk code test --include-ignores`shows ignored results with their metadata below the open results.
38
38
39
39
<figure><imgsrc="../../../../.gitbook/assets/display-ignores-snyk-cli.png"alt=""><figcaption><p>Ignores in Snyk CLI</p></figcaption></figure>
Copy file name to clipboardExpand all lines: docs/manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/snyk-ide.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@
5
5
6
6
Snyk Code Consistent Ignores is in Early Access and available only with Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
7
7
8
-
To make sure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review [Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md)sections.
8
+
To ensure Consistent Ignores meets your needs and requirements, review the [FAQ](consistent-ignores-for-snyk-code-faqs.md)section.
9
9
{% endhint %}
10
10
11
11
When you run tests in any of the [four supported Snyk IDE plugins](../../../../scm-ide-and-ci-cd-integrations/snyk-ide-plugins-and-extensions/), the plugins will take into account your ignores.
@@ -31,6 +31,6 @@ The IDE display output hides ignored results by default to maintain developer fo
31
31
32
32
## View ignores in Snyk IDE
33
33
34
-
You can apply filters in the plugin settings to show ignored results alongside open results or in isolation. When you set ignored issues to display, the issues and their details will appear in the plugin.
34
+
You can apply filters in the plugin settings to show ignored results alongside open results or in isolation. When you set ignored issues to display, the issues and their details appear in the plugin.
35
35
36
36
<figure><imgsrc="../../../../.gitbook/assets/snyk-code-ignored-issue-ide.png"alt=""><figcaption><p>View ignores in Snyk IDE</p></figcaption></figure>
Copy file name to clipboardExpand all lines: docs/manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code-early-access/snyk-pull-request-checks.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,22 +1,22 @@
1
-
# Snyk Pull Request Checks
1
+
# Consistent Ignores for Snyk Code Pull Request Checks
2
2
3
3
{% hint style="info" %}
4
4
**Release status**
5
5
6
6
Snyk Code Consistent Ignores is in Early Access and available only with Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
7
7
8
-
To make sure Snyk Code Consistent Ignores Early Access meets your needs and requirements, review [Known limitations](known-limitations.md) and [FAQ](consistent-ignores-for-snyk-code-faqs.md)sections.
8
+
To ensure Consistent Ignores meets your needs and requirements, review the [FAQ](consistent-ignores-for-snyk-code-faqs.md)section.
9
9
{% endhint %}
10
10
11
11
## Pull Request Check default ignore behavior
12
12
13
-
When viewing a pull request (PR) check from Snyk in your integrated SCM, ignored findings do not contribute to the PR check outcome. A PR check will not fail due to an ignored finding. Additionally, the Snyk PR experience will include the count of active (unignored) findings in the summary comment and display each finding as an inline comment within the PR.
13
+
When viewing a pull request (PR) check from Snyk in your integrated SCM, ignored findings do not contribute to the PR check outcome. A PR check does not fail due to an ignored finding. Additionally, the Snyk PR experience includes the count of active (unignored) findings in the summary comment and displays each finding as an inline comment within the PR.
14
14
15
-
If a finding is ignored after a PR check has already been completed, the PR check must be retriggered by committing again to the PR. Upon retriggering, the PR check the following changes will occur:
15
+
If a finding is ignored after a PR check has already been completed, the PR check must be retriggered by committing again to the PR. Upon retriggering, the PR check the following changes occur:
16
16
17
-
• The ignored finding will no longer be counted in the summary table.
17
+
• The ignored finding is no longer counted in the summary table.
18
18
19
-
• The inline comment for the ignored finding will be collapsed by default and marked as resolved.
19
+
• The inline comment for the ignored finding is collapsed by default and marked as resolved.
20
20
21
21
Ignores are respected in[ Snyk Code Pull Request Checks](../../../../scan-with-snyk/pull-requests/pull-request-checks/) regardless of whether they are created through [policy](./#manage-ignores-at-the-group-level-through-security-policies) or for an [individual `snyk/assets/finding/v1` value](./#manage-ignores-in-snyk-projects).
22
22
@@ -36,6 +36,6 @@ Before being ignored, the finding appears as an inline comment in your SCM integ
36
36
37
37
<figure><imgsrc="../../../../.gitbook/assets/finding-before-ignore.png"alt=""><figcaption><p>PR check ignored finding details in GitHub </p></figcaption></figure>
38
38
39
-
After an ignore is applied, and a PR check is re-triggered, the inline comment for the ignored finding is collapsed by default and marked as resolved. 
39
+
After an ignore is applied and a PR check is re-triggered, the inline comment for the ignored finding is collapsed by default and marked as resolved. 
40
40
41
41
<figure><imgsrc="../../../../.gitbook/assets/finding-after-ignored-collapsed-view.png"alt=""><figcaption><p>Collapsed view of a finding in Github</p></figcaption></figure>
0 commit comments