Datadog and Snyk unveil GitHub integration to automate software growth workflow

Datadog declared the Datadog Vulnerability Evaluation GitHub Motion, Datadog’s initially action listed on the GitHub Marketplace. GitHub Steps supply effective, versatile CI/CD with the capability to automate any program advancement workflow.

The Datadog motion constantly screens dependency and version data of code becoming deployed. By integrating this information with Datadog’s Steady Profiler and Snyk’s Vulnerability database, this presents a genuine-time watch of what code is in fact accessible and vulnerable in manufacturing.

Scanning purposes for identified vulnerabilities usually yields a lengthy list of issues that are tough to prioritize and subsequently resolve. With the information collected by the new action, vulnerability examination will be done by the Datadog Continuous Profiler centered on Snyk vulnerability metadata.

This permits engineering groups to quickly detect when and how typically vulnerable procedures are invoked in stay environments and prioritize their protection fixes based on serious-environment application habits.

The Datadog Vulnerability Evaluation GitHub Motion can be located and mounted specifically from the GitHub Market with out needing to deal with scripts or infrastructure.

“Maintaining strong security posture is critical for present day apps, but with common vulnerability evaluation it can be hard to distinguish the signal from the noise,” said Ilan Rabinovitch, Vice President, Product and Community at Datadog.

“Integrating the Steady Profiler with the vulnerability database highlights significant security vulnerabilities, when using the GitHub Action automates this procedure by bringing stability straight into software enhancement.”

“We’re going toward a environment the place protection, tests, and even responsibility for production operations are shifting still left towards the developer,” reported Jeremy Epling, Vice President, Product Administration at GitHub.

“Partnering with comprehensive-stack checking leaders like Datadog tends to make it simple for developers and DevOps teams to incorporate vital functions tooling as element of their day-to-day operate ecosystem, so teams can emphasis on delivering price, at larger velocity.”

“By combining Snyk-enriched vulnerability metadata with the Datadog Continual Profiler, for the 1st time developers can specifically pinpoint when an software actually calls susceptible code, to better prioritize remediation efforts,” mentioned Geva Solomonovich, CTO World-wide Alliances, Snyk.

“Our partnership with Datadog will allow for builders to deploy their security methods with increased effectiveness.”