Why did the Snyk CLI discover different dependencies to an integration

Did some dependencies found via the CLI differ from those found via GitHub, GitLab, Bitbucket Server or another integration?

When you use our CLI tool and run a test (either by snyk test or snyk monitor) we are able to look at the dependencies installed on the disk in order to see exactly what your project relies on.

However, when we run a test against an integration such as GitHub, GitLab or Bitbucket server we only see your dependency files (e.g. package.json, Gemfile.lock etc) and we need to infer the dependencies that would be installed if you were to install them from within an environment.