We're using Snyk as a connected security container on Jira projects.
New vulnerabilities are listed, we created linked Jira issues. When the vulnerabilities are resolved, they never update their status in the vulnerabilities list although they are not found anymore also in Snyk.
For example see the following screenshot:
When we click on the first vulnerability (which has been fixed in the code since long time) the Snyk page is open and indeed there are no vulnerabilities found:
Checking the same project in Snyk only shows 2 medium vulnerabilities:
Also checking in Bitbucket (which is also connected to Snyk) reflects the correct vulnerabilities:
Is this a known bug that Snyk security containers do not update the status of the vulnerabilities presented in Jira?
Hi Oliver,
Thank you for bringing this to our attention. Can you please email us at snyk_jira_info@snyk.io and we can help you work through this issue.
Thanks!
LaToya
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.