37 releases · 2 this month
Snyk updated its pURL API to accurately recognize security fixes in Broadcom Tanzu Spring enterprise builds, reducing false positive vulnerability reports for commercial subscribers.
Snyk announced end-of-life support for the Kubernetes connector (kubernetes-scanner) for Insights, with data ingestion stopping on November 2, 2026.
Snyk now supports scanning Python 3.15 projects via the CLI and SCM integrations.
What Changed? You can now set how often Snyk scans your repositories for secrets using Repo Monitor Configuration . In "Inventory -> repository -> Settings" or in bulk via "Inventory -> Configure Monitoring", choose Daily, Weekly or Never for Secrets. Set it for a single repository or for many repositories at once. Secrets also now appear in Inventory.
We are pleased to announce Snyk CLI release, v1.1308.1 This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes .
What Changed? When you submit an ignore request under Ignore Approval Workflow, the issue now shows a clear "Pending Ignore Request" status directly on the Project's Issues page and in the issue details , so you can see at a glance that a request is awaiting review, instead of it looking like any other open issue.
This update will be available on October 26, 2026 . Snyk Code reports significantly more findings in this update. Affected projects will report the additional findings on their next scan. Snyk Code now analyzes more deeply and more accurately in Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby.
The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page. The installer registers a scheduled job on the machine, so Agent Supply Chain Security scans run on their own schedule without needing MDM. What The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page in Evo.
Snyk Code priority scores dropped by up to 200 points on September 1, 2026, for findings whose rule had a fix example. What changed A finding used to earn 200 of the 1,000 available priority score points when Snyk held a fix example for its rule. The August 17, 2026 release retired fix examples, and the scoring factor went with them.
You can connect any MCP client, such as Claude, Codex or Cursor, to Evo and ask about your AI estate from the agent you already work in. What's new. You can now: Ask what AI assets Evo has discovered across your code, your developer machines, and your pentest targets See how those assets connect, for example which MCP servers an agent uses or which findings...
Snyk API & Web now lets you upload your organization's internal Certificate Authority (CA), so the certificates it issues are trusted the same way as publicly issued certificates. What's new Many enterprises operate their own internal CA to issue certificates for both internal tools and internet-facing applications.
The "What" Repo Content Sync keeps your Snyk Projects aligned with what your repositories actually contain. When a change is merged to a branch Snyk monitors, Snyk creates and begins monitoring Projects for newly added manifest, Dockerfile, and configuration files, and deactivates the Projects whose files were removed.
Starting August 18, 2026, a user's Evo data is limited to the Snyk Organizations they can read. Until now, everyone with access to Evo saw every repository, asset, and issue in the Tenant. Evo now reuses your existing Snyk Organization hierarchy, so there is nothing new to model and no migration to run.
This update is available on September 14, 2026 . It improves coverage and precision across Snyk Code: template files are analyzed, Java framework and library support is extended, detection gaps are closed in six languages, and .gitignore no longer hides committed files from analysis.
Starting August 17, 2026, Evo by Snyk uses a rebuilt model risk score to evaluate the AI models discovered in your organization. The previous Risk Index is replaced by a single score from 0–1,000 that combines attack success rate with the potential impact of a successful attack, tested against categories including prompt injection, data exfiltration, and...
The "What" Snyk is introducing Snyk Assist , an AI-powered support and guidance assistant available directly inside the Snyk UI. Snyk Assist answers product, setup, and troubleshooting questions in plain language, grounded in Snyk's own documentation, release notes, and support knowledge articles.
Snyk is rolling out a redesigned navigation experience! The classic sidebar , which listed every page across Tenant, Group, and Organization scopes at once , is replaced by a single breadcrumb bar at the top that lets users switch scope in one click via per-level drop-downs.
Starting August 4, 2026, Snyk secrets scanner is generally available to help secure your entire SDLC against credential leaks. Stolen credentials remain a leading initial access vector in security breaches, and the rise of AI-generated code increases the risk of exposing sensitive data.
Until now, a developer could suppress a Snyk Code finding on their own , directly in the Web UI or IDE , with no review step. Suppression happened silently and unilaterally, leaving security teams without a gate on what got ignored.
COBOL support becomes generally available on August 17, 2026. Snyk Code brings SAST to your mainframe applications, scanning fixed-format COBOL across the integrations you already use, so mainframe code receives the same real-time, in-workflow security coverage as the rest of your stack.
This update is available on August 17, 2026. It broadens language and framework coverage, adds serverless and LangChain support for Python, and cuts false positives in C++ and C#. Python LangChain support , Snyk Code covers applications that use LangChain, flagging unsafe handling of data flowing through the framework.
We are introducing Automatic Target Authentication Configuration for API & Web, an AI-driven feature that streamlines DAST authenticated scan setup.
Developer security.
| Release-notes page | Site | Feed |
|---|---|---|
| Product Updates updates.snyk.io | updates.snyk.io | None |
| Product Updates updates.snyk.io | updates.snyk.io | None |
| What's new? docs.snyk.io | docs.snyk.io | None |
Releasesby Glyph