Skip to content

Commit 6943414

Browse files
De Snyk and refer to Dependabot/npm audit only (#123)
https://eaflood.atlassian.net/browse/PDEV-279
1 parent 55bbf57 commit 6943414

3 files changed

Lines changed: 3 additions & 3 deletions

File tree

docs/guides/continuous_integration.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ There are lots of other tools which can integrate with GitHub, especially if you
2828

2929
These tools check the security of your project. This can include reporting vulnerabilities in your dependencies, or doing static analysis on your code.
3030

31-
- Use [Snyk](https://snyk.io/) for Node.js projects
31+
- Use [Dependabot](https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/dependabot-quickstart-guide) and/or [npm audit](https://docs.npmjs.com/cli/v9/commands/npm-audit) for Node.js projects
3232
- Use [Hakiri](https://hakiri.io/) for Ruby projects
3333

3434
These tools are free to use for open source GitHub repositories.

docs/guides/opening_private_code.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ However, you may sometimes inherit code that is not open - these steps are inten
1010

1111
- Check for sensitive information: ensure there are no credentials, API keys, or sensitive data in your code. Tools such as gitLeaks can be used for this purpose. You must check your entire commit history, not just the latest code.
1212

13-
- Security flaws: identify and fix any security vulnerabilities. You should analyse your code using SonarQube Cloud to identify security issues in the code and use a tool such as Snyk to check your dependencies for known vulnerabilities.
13+
- Security flaws: identify and fix any security vulnerabilities. You should analyse your code using SonarQube Cloud to identify security issues in the code and use a tool such as Dependabot or npm audit to check your dependencies for known vulnerabilities.
1414

1515
## Documentation
1616

docs/standards/node_standards.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
### Package Management
1919
- Use NPM.
2020
- Use a package.json and package-lock.json for repeatable builds.
21-
- Use an automated checker such as Snyk or Dependabot to ensure that your dependencies are up to date with the
21+
- Use an automated checker such as Dependabot or npm audit to ensure that your dependencies are up to date with the
2222
latest patches.
2323
- Separate dependencies and dev dependencies.
2424
- Update your version number inline with the [semantic versioning standard](https://semver.org/).

0 commit comments

Comments
 (0)