Execute Snyk scanning through Bitbucket Pipelines

Snyk is one of several security tools that can be tightly integrated with Bitbucket and Bitbucket Pipelines. This tight integration allows for a Snyk scan to be executed to look for security vulnerabilities as part of testing when it is a step in a Bitbucket pipeline.

Let’s learn how to set up this integration.

Getting ready

Integration between Snyk and Bitbucket takes the following forms:

• Snyk is set up as a security provider in Bitbucket so that automated scanning can occur on the repository and its results appear in the Security section of the repository sidebar.
• Snyk pipes can execute Snyk scans as part of a Bitbucket Pipelines execution.

Let’s look at setting this up.

Setting up Snyk as a security provider

We’ll start by setting up Snyk as a security provider for Bitbucket. To do that, perform the following steps:

1. In your Bitbucket repository, select Security from the...