Security Snyk

Applies the Snyk Gradle plugin with Helix defaults for authentication, severity gating, and multi-project scans.

• Reads the Snyk API token from the snykToken Gradle property or SNYK_TOKEN environment variable.
• Reads an optional severity threshold from the snykSeverity Gradle property or SNYK_SEVERITY environment variable.
• Enables automatic CLI download and update and runs with –all-sub-projects.

Usage

plugins {
    id 'com.helixframework.security-snyk'
}

plugins {
    id("com.helixframework.security-snyk")
}

Configuration

This plugin does not create a Helix-specific extension. Configure it through the following properties or helper methods.

• snykToken: Gradle property used as the Snyk API token when present.
• SNYK_TOKEN: Environment variable fallback for the Snyk API token.
• snykSeverity: Optional Gradle property that sets the minimum failing severity threshold.
• SNYK_SEVERITY: Environment variable fallback for the minimum failing severity threshold.