I've got a mono repo with multiple languages, but Snyk has only found one of them
When adding a project in Snyk, we look for supported dependency manifest files in the root of your codebase.
Please check our list of supported languages and package managers for an up to date list.
Please note that there can be some differences between the files required for CLI support vs GIT import support. If you are having issues with the testing or import of a particular language's manifest files, please check the relevant section of that language in the link above.
If you are not seeing a project file at all in the web UI, note that projects without any detected vulnerabilities are filtered out by default. Check if it is filtered out by turning on the 'without issues' checkbox. If it is there, open the project and check that the dependency count is as expected.
CLI tests
If you are testing a monorepo via CLI, the standard snyk test
will only test the first manifest it finds. To find all manifests, please use the --all-projects
option, unless there is a different option listed on the language support page for the language in question (eg. --maven-aggregate-project
).
SCM/GIT Imports
If your repo has already been imported, but did not detect the manifest file, you can try a re-import by clicking on the Add Project button.
You can also directly specify a dependency manifest file in one of two ways:
If you already have a target associated with the SCM repository, you can add the dependencies by going to the Projects page, clicking on the (+) icon beside the target and typing in the path to the dependency file you wish to add.
If you don't already have a target associated with the SCM repository, you can add the project by visiting the Add Project button, selecting the repository, then scrolling to the bottom, clicking 'Add custom file location', choosing the repository and entering the path to the dependency file you wish to add. Choose Add Selected Repositories from the top once done.