You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: docs/enterprise-setup/service-accounts/service-accounts-using-oauth-2.0.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ You can create an `oauth_client_secret` service account at either the Group or O
13
13
14
14
The response returns the `client_secret` and the `client_id`. You cannot view the `client_secret` again after the service account is created. If you have misplaced it, you can [rotate](manage-service-accounts-using-the-snyk-api.md#manage-a-service-account-client-secret-for-your-group) your `client_secret` and receive a new one.
15
15
16
-
{% hint style="danger" %}
16
+
{% hint style="warning" %}
17
17
Never share the `client_secret` publicly, as this is used to authenticate your service account. Keep it secure and private.
Copy file name to clipboardexpand all lines: docs/enterprise-setup/snyk-broker/install-and-configure-snyk-broker/advanced-configuration-for-helm-chart-installation/insecure-downstream-mode.md
+6-7
Original file line number
Diff line number
Diff line change
@@ -4,19 +4,18 @@ description: Usage of this mode is discouraged.
4
4
5
5
# Insecure Downstream Mode
6
6
7
-
In some situations, you may need to use only http for your downstream connection. Usually because of historical httponly setups, these cases are relatively infrequent, and upgrading them to use https instead is our recommendations.
7
+
In some situations, you may need to use only HTTP for your downstream connection. These cases are relatively infrequent and usually occur because of historical http-only setups. Snyk recommends upgrading to use HTTPS instead.
8
8
9
-
In the cases where this is not possible in the near term, the insecure downstream mode introduces a way to force downstream requests to your SCM/JIRA/others to take place over http instead of https.
9
+
In the cases where this is not possible in the near term, the insecure downstream mode introduces a way to force downstream requests to your SCM/JIRA/others to take place over HTTP instead of HTTPS.
10
10
11
-
Using this mode should be avoided in most cases and remains opt-in.\
12
-
It makes all requests go over http, therefore not benefiting from the safety of TLS encryption. It means all your credentials and data will appear unencrypted, which is only tolerable in tightly secure networks.
11
+
You should avoid using this mode in most cases; it is opt-in. It makes all requests go over HTTP, thus without the benefit of the safety of TLS encryption. This mode means all your credentials and data will appear unencrypted, which is tolerable only in tightly-secured networks.
13
12
14
13
Use the [Custom additional options for Broker Helm Chart installation](custom-additional-options-for-broker-helm-chart-installation.md) to inject this environment variable:
Copy file name to clipboardexpand all lines: docs/enterprise-setup/snyk-broker/troubleshooting-broker.md
+5-5
Original file line number
Diff line number
Diff line change
@@ -30,7 +30,7 @@ To keep the logs concise in normal operation, Snyk produces minimal information
30
30
31
31
When you set `LOG_INFO_VERBOSE="true"`, the environment variable will add the headers in these log lines without requiring that you use debug.
32
32
33
-
{% hint style="danger" %}
33
+
{% hint style="warning" %}
34
34
If you override the default logging, some logs may be provided by other processes such as API requests, and may list credentials. Before you send any Broker logs with increased logging enabled, check for any passwords or tokens and redact them in bulk.
35
35
{% endhint %}
36
36
@@ -115,20 +115,20 @@ Open Fix/Upgrade PRs or PR/recurring tests may fail because of fetching big mani
115
115
116
116
## Troubleshooting Broker with Code Agent
117
117
118
-
<figure><imgsrc="https://lh3.googleusercontent.com/r_qtONpOOEW35gdyoBcWDAiC6j04M76q8mh922SHor4bdNZdt83sj2kP7d5hbzYcWVXp4Q2hZEiCeAVOmcj4Bu1yFPdnyp3rK7kKeBK8DZEd9S133Xn3YdjddclVf5maEbP23Jor"alt="Snyk Code Analysis workflow with Broker"><figcaption><p>Snyk Code Analysis workflow with Broker</p></figcaption></figure>
118
+
<figure><imgsrc="https://lh3.googleusercontent.com/r_qtONpOOEW35gdyoBcWDAiC6j04M76q8mh922SHor4bdNZdt83sj2kP7d5hbzYcWVXp4Q2hZEiCeAVOmcj4Bu1yFPdnyp3rK7kKeBK8DZEd9S133Xn3YdjddclVf5maEbP23Jor"alt=""""><figcaption><p>Snyk Code Analysis workflow with Broker</p></figcaption></figure>
119
119
120
120
The best way to troubleshoot the Broker with the Code Agent is to understand the communication flow. Traffic travels from Snyk > Broker Client > Code Agent > On-premise Git > Code Agent > Snyk.
121
121
122
-
The vast majority of problems with the Code aAgent are due to traffic being interrupted at one of these points.
122
+
The vast majority of problems with the Code Agent are due to traffic being interrupted at one of these points.
123
123
124
124
### Troubleshooting the Code Agent
125
125
126
126
As for Standalone Broker, in order to troubleshoot the code agent, you must generate logs. Do this by attempting to import a repository.
127
127
128
128
1. Ensure that the Broker is functioning correctly and you can list the repositories. If this does not work, review the Standalone Broker troubleshooting steps.
129
-
2. If after attempting to import a repository, you see an error message `Bundle Creation Failed`, review the logs of the containers.
129
+
2. If, after attempting to import a repository, you see an error message `Bundle Creation Failed`, review the logs of the containers.
130
130
3. Start with the Broker container. Run `docker logs <container id>`
131
-
4. Look for the string `snykgit` . This is the API call from the Broker container to the Code Agent container. If you get anything other than a 200 code, there is some problem with the communication between the Broker and the Code Agent. Ensure you have the proper flags set in the docker run command. Also ensure you have set up the docker network
131
+
4. Look for the string `snykgit` . This is the API call from the Broker container to the Code Agent container. If you get anything other than a 200 code, there is some problem with the communication between the Broker and the Code Agent. Ensure you have the proper flags set in the docker run command. Also, ensure you have set up the Docker network
132
132
5. Review the logs of the Code Agent by running `docker logs <container id>`
Copy file name to clipboardexpand all lines: docs/implement-snyk/enterprise-implementation-guide/phase-2-configure-account/configure-snyk-apprisk-integrations.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -46,7 +46,7 @@ After you click on the Integration Hub, a list of the available integrations is
46
46
47
47
Use the Snyk AppRisk Integrations Hub to configure your SCM integrations. 
48
48
49
-
{% hint style="danger" %}
49
+
{% hint style="warning" %}
50
50
Integration Hub is a distinct integration interface dedicated to Snyk AppRisk, separate from the Organization integrations interface.
Copy file name to clipboardexpand all lines: docs/scan-with-snyk/snyk-container/kubernetes-integration/overview-of-kubernetes-integration/how-snyk-controller-handles-your-data.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -20,6 +20,6 @@ After you install the Snyk Controller in your Kubernetes cluster, it pulls image
20
20
* The size of scanning queues
21
21
* The network speed.
22
22
23
-
{% hint style="danger" %}
23
+
{% hint style="warning" %}
24
24
Snyk highly recommends NOT storing sensitive data in plain text as an environment variable in the container, for example, password, authentication token, and SSH key. Alternatively, you can store the sensitive data in a Secret, mount it as a Volume, and access the information from there.
0 commit comments