Skip to content

Commit ac65cc3

Browse files
aluca3gitbook-bot
authored andcommitted
GITBOOK-10235: AL - Merged - Improved .NET scanning: updated instructions for Nuget integration
1 parent b2f24c9 commit ac65cc3

File tree

1 file changed

+8
-10
lines changed

1 file changed

+8
-10
lines changed

docs/supported-languages/supported-languages-list/.net/improved-.net-scanning.md

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -8,12 +8,6 @@ Improved Snyk Open Source scanning for NuGet .NET applications is in Early Acces
88
You can enable the feature by using [Snyk Preview](../../../snyk-platform-administration/snyk-preview.md).
99
{% endhint %}
1010

11-
## Limitations of existing solution
12-
13-
The existing .NET scanning solution for SCM integration in the Snyk Web UI and CLI uses two [different approaches](guidance-for-snyk-for-.net.md#dependency-analysis). The Dependency Analysis for SCM integrations can produce [false positives](guidance-for-snyk-for-.net.md#build-time-versus-runtime-dependencies) that have no remediation available and must be manually ignored.
14-
15-
If you use the CLI to scan Projects, you can expect more accurate results compared to importing the same Project using an SCM integration. You can [encounter errors](troubleshooting-snyk-for-.net.md) when scanning Projects that use specific .NET features.
16-
1711
## Scanning improvements
1812

1913
Snyk improved the .NET scanning process to ensure that dependency results are consistent across the CLI and SCM integrations. This update also eliminates false positives from runtime dependencies that were previously displayed in the UI. The approach involves using the internal workings of the .NET ecosystem.
@@ -37,17 +31,21 @@ Follow these steps to enable the improvements:
3731

3832
Since the improved .NET solution will build your .NET Project, Snyk requires access to any private NuGet repositories.
3933

40-
The recommended approach is to use [`nuget.config`](https://learn.microsoft.com/en-us/nuget/reference/nuget-config-file) files along with registering the credentials in Snyk NuGet private package repository integration (**Settings** > **Integrations** > **NuGet Repositories**).
41-
42-
<figure><img src="../../../.gitbook/assets/org_settings_nuget_repo.png" alt="Set up Nuget Repositories from the Settings, Integrations screen"><figcaption><p>Set up Nuget Repositories from the Settings, Integrations screen</p></figcaption></figure>
34+
Snyk recommends using [`nuget.config`](https://learn.microsoft.com/en-us/nuget/reference/nuget-config-file) files along with registering the credentials in Snyk NuGet private package repository integration. To do this, navigate to Organization **Settings** > **Integrations** > **Add integration** > **Nuget** > **Edit settings**.&#x20;
4335

4436
If you are not using `nuget.config`, but another way of informing the .NET ecosystem of where to look for private packages, Snyk will attempt to add all private NuGet repository credentials defined in the private package repository integration as a `dotnet nuget` source before restoring the Project.
4537

4638
Fill in the **Your tokens** fields by adding a **Username**, the **Personal access token**, and the repository **URL** (supports only HTTPS sources).
4739

4840
For more information, see [Package repository integrations](../../../scan-with-snyk/snyk-open-source/package-repository-integrations/).
4941

50-
### Limitations on improved .NET scanning for SCM integrations
42+
## Limitations
43+
44+
The existing .NET scanning solution for SCM integration in the Snyk Web UI and CLI uses two [different approaches](guidance-for-snyk-for-.net.md#dependency-analysis). The Dependency Analysis for SCM integrations can produce [false positives](guidance-for-snyk-for-.net.md#build-time-versus-runtime-dependencies) that have no remediation available and must be manually ignored.
45+
46+
If you use the CLI to scan Projects, you can expect more accurate results compared to importing the same Project using an SCM integration. You can encounter errors when scanning Projects that use specific .NET features.
47+
48+
For improved .NET scanning for SCM integrations:&#x20;
5149

5250
* `Directory.Build.props`, `global.json` and other .NET-specific manifest files are supported, but the file names must use upper and lower case, as Microsoft [describes](https://learn.microsoft.com/en-us/visualstudio/msbuild/customize-by-directory?view=vs-2022#directorybuildprops-and-directorybuildtargets).
5351
* For `global.json`, Snyk does not support all `major.minor.patch` versions that are currently supported by Microsoft, only a subset thereof. For more information, see this [error code](../../../scan-with-snyk/error-catalog.md#snyk-os-dotnet-0008).

0 commit comments

Comments
 (0)