dependency-track icon indicating copy to clipboard operation
dependency-track copied to clipboard

Snyk Analyser: Test Connection Button

Open msymons opened this issue 2 years ago • 2 comments

Current Behavior

Dependency-Track v4.7.0 introduced Beta support for Snyk Analyser.

This requires configuration of Organization ID and API token, as well as API Version

I thought I had valid values for all three parameters and yet nothing seemed to happen. I saw nothing in logs recording succesful configuration (or an error) and no snyk synch running (although that woul have been hours later, possibly).

Proposed Behavior

Add a button to "Test Connection", providing feedback that all is working OK... or giving details on any problems.

If possible, add additional logging.

This issue is similar to logged to requests for Test Connection buttons for:

  • OSS Index: #265
  • GitHub: #1670

Checklist

msymons avatar Jan 18 '23 17:01 msymons

For Snyk,, the test button should report:

  • HTTP 401 response: Unauthorized: the request requires an authentication token.
  • HTTP 403: Forbidden: the request requires an authentication token with more or different permissions.
  • Sunset header
  • Deprecated header
  • Anything else?

The value of the Sunset and Deprecated headers will depend upon the version of the api that has been configured in DT.

msymons avatar May 18 '23 12:05 msymons

Would really be nice :) I had a 404 error because my org's ID was incorrect and had to guess what could be the error.

AppSecAmael avatar Feb 07 '24 16:02 AppSecAmael