What's Changed
- feat: scanning support for Nuget repositories. Needs an explicit opt-in with
snyk.scanner.packageType.nuget=true
. - feat: scanning support for CocoaPods repositories. Needs an explicit opt-in with
snyk.scanner.packageType.cocoapods=true
. - feat: scanning support for Ruby Gems repositories. Needs an explicit opt-in with
snyk.scanner.packageType.gems=true
. - feat: introduced a new config param
snyk.scanner.test.continuously
(false
by default). It decides whether the plugin should periodically refresh vulnerability data from Snyk or filter access according to results obtained while the package was first requested. Without the continuous mode, new vulnerabilities aren't reported for a package that has already been allowed through the gatekeeper.
Full Changelog: 3.2.1...4.0.0
Upgrading from version 3.*
Version 3 exhibits the same behaviour as release 4.0.0
with continuous mode on. In order to keep the periodic re-tests of packages, include the new parameter in snykSecurityPlugin.properties
: snyk.scanner.test.continuously=true
.