Merge pull request #6213 from snyk/chore/CLI-1187_update_1.1300

chore: update 1.1300

Author: PeterSchafer

.circleci/config.yml

@@ -1165,8 +1165,8 @@ workflows:
                 - main
                 - '/release.*/'
 
-      - trigger-building-dxt:
-          name: Trigger building mcp-dxt (stable)
+      - trigger-build-agentic-integration:
+          name: Trigger building agentic-integration (stable)
           context:
             - team-hammerhead-common-deploy-tokens
             - devex_cli_docker_hub
@@ -1744,13 +1744,13 @@ jobs:
           command: ./release-scripts/upload-artifacts.sh trigger-snyk-images
       - failed-release-notification
 
-  trigger-building-dxt:
+  trigger-build-agentic-integration:
     executor: docker-amd64
     steps:
       - prepare-workspace
       - run:
-          name: Trigger build-and-release workflow at mcp-dxt
-          command: ./release-scripts/upload-artifacts.sh trigger_build_dxt
+          name: Trigger build-and-release workflow at agentic-integration-wrappers
+          command: ./release-scripts/upload-artifacts.sh trigger_build_agentic_integration
       - failed-release-notification
 
   noop:

.gitleaksignore

@@ -86,3 +86,4 @@ ccd03cce97470452766ab397f2ba770dbb2e002e:test/jest/unit/lib/iac/drift/fixtures/a
 test/jest/acceptance/instrumentation.spec.ts:snyk-api-token:19
 1b65935bc7c69b1029d7c63808af211ae6030c98:test/fixtures/sast/shallow_sast_webgoat/JWTFinalEndpointTest.java:jwt:31
 test/jest/acceptance/snyk-code/snyk-code-integration.spec.ts:snyk-api-token:181
+test/jest/acceptance/error-catalog.spec.ts:snyk-api-token:32

binary-releases/RELEASE_NOTES.md

@@ -1,47 +1,25 @@
-## [1.1300.0](https://github.com/snyk/snyk/compare/v1.1299.1...v1.1300.0) (2025-10-01)
+## [1.1300.0](https://github.com/snyk/snyk/compare/v1.1299.1...v1.1300.0) (2025-10-08)
 
 The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)
 
 ### Features
 
-* [CN-249] support scanning system JARs ([54e84d8](https://github.com/snyk/snyk/commit/54e84d8f4efda07f21b0e729f75440fa4608966c))
-* [CN-342] Add TargetOS to output of container scan ([aa55cd9](https://github.com/snyk/snyk/commit/aa55cd90683995d4143f43173eddee61ecf88167))
-* add linux static experimental binary ([86305ef](https://github.com/snyk/snyk/commit/86305ef4d9e769d483e33e51d84760685d8050c9))
-* add runAutomationDetails ID to SARIF output ([3e232e5](https://github.com/snyk/snyk/commit/3e232e52a105620c638b211bbc1a8baddeddb170))
-* add support for godot projects ([d9fc200](https://github.com/snyk/snyk/commit/d9fc2008287349c63b3144634549c77cb3864fd9))
-* enable reachability checks in OS extension [OSF-91] ([efaa4bc](https://github.com/snyk/snyk/commit/efaa4bc9554f187cebfd7705c0c2775c2d1f2459))
-* **monitor:** add --reachability-id support ([58af8cc](https://github.com/snyk/snyk/commit/58af8ccfca7c1f5cbe8c216abd181787c78cbaec))
-* re-enable sbom reachability user journey test ([ca72c3e](https://github.com/snyk/snyk/commit/ca72c3e63d8676060d9cc6435ab603b96911e2c2))
-* skip sbom reachability test ([ceb25b8](https://github.com/snyk/snyk/commit/ceb25b8c09ea1058acf01a227b6c57cf5f9f0048))
-* support new test service commit ID metadata ([1df4d26](https://github.com/snyk/snyk/commit/1df4d2619cee501cb4a1ac2e9480f0d2c7ddcf08))
-* **test:** Adds support for maven metaversions ([f321ffa](https://github.com/snyk/snyk/commit/f321ffa6efdf2f269f0b7fb1a87b91332a7da18e))
+* **general:** Improve SARIF compatibility by adding runAutomationDetails ([3e232e5](https://github.com/snyk/snyk/commit/3e232e52a105620c638b211bbc1a8baddeddb170))
+* **container:** Add support scanning system JARs ([54e84d8](https://github.com/snyk/snyk/commit/54e84d8f4efda07f21b0e729f75440fa4608966c))
+* **container:** Add TargetOS to output of container scan ([aa55cd9](https://github.com/snyk/snyk/commit/aa55cd90683995d4143f43173eddee61ecf88167))
+* **test:** Add support for godot projects ([d9fc200](https://github.com/snyk/snyk/commit/d9fc2008287349c63b3144634549c77cb3864fd9))
+* **test:** Add support for maven metaversions ([f321ffa](https://github.com/snyk/snyk/commit/f321ffa6efdf2f269f0b7fb1a87b91332a7da18e))
+* **language-server:** Add CVSSv4 Links in IDE Issue Details
+* **mcp:** Workflow and performance improvements
 
 
 ### Bug Fixes
 
-* adapt input directory handling to preserve whitespaces ([5a0f7eb](https://github.com/snyk/snyk/commit/5a0f7eb5dfb05b0d6a5fa5fc54fcf473bf3827e1))
-* **auth:** Fix improper regex during auth that can lead to SSRF ([18466b3](https://github.com/snyk/snyk/commit/18466b3bbe60b4b1aad6d409f1cab62ff2df3fb7))
-* changed fixture used for integration test for faster success ([a5ac939](https://github.com/snyk/snyk/commit/a5ac939e5b417237dcb290e150327119fb0c1f77))
-* **cicd:** "gobject-introspection: no bottle available" error when setting up macos acceptance tests ([7891cc2](https://github.com/snyk/snyk/commit/7891cc2da2d7949ee07c1b047a73f7242ab67508))
-* **cicd:** follow redirect with wget ([e267b96](https://github.com/snyk/snyk/commit/e267b96a9c12932b1458532cd6510be4930b0823))
-* conforming the way we take precedence of auth config values ([57ae3ca](https://github.com/snyk/snyk/commit/57ae3ca91b6a19e6e7850b803373664b91450fd9))
-* display error details for all project scans on failing targets ([36d14f9](https://github.com/snyk/snyk/commit/36d14f940003d093df0bdc9d22a32d9b26b6b252))
-* enhancing shell spawn hardening from OSS plugins ([f7881f1](https://github.com/snyk/snyk/commit/f7881f1c4b4dcce465fb6db7df24048a73a37e04))
-* Ensure to not redact crucial debug values ([8432371](https://github.com/snyk/snyk/commit/84323710d666431e6494f584677ae958ba9ac4ac))
-* Fix reduced configuration cache usage ([ae111a3](https://github.com/snyk/snyk/commit/ae111a32e9508db3366b37435e99002ed73a49f6))
-* fixing broken alpine installation ([57a5a92](https://github.com/snyk/snyk/commit/57a5a927c7f63b63c70521b2d81b05ad4bf3c9bf))
-* fixing host auto-detection bug in snyk auth ([1fd2e56](https://github.com/snyk/snyk/commit/1fd2e569d3f3a4022275b317be041e460996f4ba))
-* **iac:** upgrade iac components to address a vulnerability [IAC-3439] ([eaaaf84](https://github.com/snyk/snyk/commit/eaaaf844237b430d9d9ee7109ada5b5bd2e103a5))
-* ignore casing fix in the policy lib ([b432406](https://github.com/snyk/snyk/commit/b4324066fbdca2224e3a1aca223cde5b2b6e0ea2))
-* Increase tolerance for invalid input directories ([ce96a31](https://github.com/snyk/snyk/commit/ce96a3160de0b26a2b13ad1ea7eb58496f8fa1f6))
-* **instrumentation:** Fix mapping of floating point values ([c0be734](https://github.com/snyk/snyk/commit/c0be7342e1ef3d2e3116006ee86850cdbda20106))
-* **logging:** pass known CLI parameters to scrub out sensitive data ([0cf19a7](https://github.com/snyk/snyk/commit/0cf19a7dc8b761ec61d7ae0f3f5d160b0e2b0450))
-* making test fixtures in regression tests gradle 9 compatible ([5604157](https://github.com/snyk/snyk/commit/5604157481ae0bb68361f38826082c3f392a803b))
-* moving to a private docker repo ([2c96c50](https://github.com/snyk/snyk/commit/2c96c50a236e83e27b5195c22802ec28fa9d6c10))
-* requiring Node 20 as a minimum ([31254f3](https://github.com/snyk/snyk/commit/31254f3443045d7016a55ef054b7f41dda66b88e))
-* resolve project assets file path dynamically ([75a152e](https://github.com/snyk/snyk/commit/75a152ec29e91f9c37a26f0daed77a142cebef39))
-* updating wrong markdown files ([af688db](https://github.com/snyk/snyk/commit/af688db493b99b65e52583830509b26ac78b0370))
-* upgrade to go 1.24.6 ([045f864](https://github.com/snyk/snyk/commit/045f86465daaf5ff174f4541c673d4e43f79f9d2))
-* Use snyk-code-0006 for sast consistently ([e36f813](https://github.com/snyk/snyk/commit/e36f813ae20cd18c4012a744de9fbdc7d873a0e7))
-* using Gradle 9 on build image ([cc1f80d](https://github.com/snyk/snyk/commit/cc1f80dbcbb6492aa43c2b51a94ec4b1973c12f7))
-
+* **container:** Fixed crashes when scanning docker images with very large files ([72cb040](https://github.com/snyk/snyk/commit/72cb04083d3c204d6755f194f7ccc6e522788f66))
+* **test:** Re-enable support for python 2.7 ([02c7fe3](https://github.com/snyk/snyk/commit/02c7fe373e3ec1a59d15de1f7fe87e461d3fafb5))
+* **test:** Improved error information when using --all-projects ([36d14f9](https://github.com/snyk/snyk/commit/36d14f940003d093df0bdc9d22a32d9b26b6b252))
+* **test:** Fix a bug due to case-sensitive ignores ([b432406](https://github.com/snyk/snyk/commit/b4324066fbdca2224e3a1aca223cde5b2b6e0ea2))
+* **test:** Resolve project assets file path dynamically ([75a152e](https://github.com/snyk/snyk/commit/75a152ec29e91f9c37a26f0daed77a142cebef39))
+* **iac:** Upgrade iac components to address a vulnerability [IAC-3439] ([eaaaf84](https://github.com/snyk/snyk/commit/eaaaf844237b430d9d9ee7109ada5b5bd2e103a5))
+* **logging:** Fix broken debug logs due to secret redaction by redacting all user input ([0cf19a7](https://github.com/snyk/snyk/commit/0cf19a7dc8b761ec61d7ae0f3f5d160b0e2b0450))
+* **language-server:** Multiple bugfixes

cliv2/cmd/cliv2/instrumentation.go

@@ -6,9 +6,12 @@ import _ "github.com/snyk/go-application-framework/pkg/networking/fips_enable"
 import (
 	"os/exec"
 	"strings"
+	"time"
 
 	"github.com/snyk/go-application-framework/pkg/analytics"
 	"github.com/snyk/go-application-framework/pkg/configuration"
+	"github.com/snyk/go-application-framework/pkg/instrumentation"
+
 	localworkflows "github.com/snyk/go-application-framework/pkg/local_workflows"
 	"github.com/snyk/go-application-framework/pkg/networking"
 	"github.com/snyk/go-application-framework/pkg/networking/middleware"
@@ -48,3 +51,23 @@ func addRuntimeDetails(instrumentor analytics.InstrumentationCollector, ua netwo
 func addNetworkingDetails(instrumentor analytics.InstrumentationCollector, config configuration.Configuration) {
 	instrumentor.AddExtension("network-request-attempts", config.GetInt(middleware.ConfigurationKeyRetryAttempts))
 }
+
+func updateInstrumentationDataBeforeSending(cliAnalytics analytics.Analytics, startTime time.Time, ua networking.UserAgentInfo, exitCode int) {
+	targetId, targetIdError := instrumentation.GetTargetId(globalConfiguration.GetString(configuration.INPUT_DIRECTORY), instrumentation.AutoDetectedTargetId, instrumentation.WithConfiguredRepository(globalConfiguration))
+	if targetIdError != nil {
+		globalLogger.Printf("Failed to derive target id, %v", targetIdError)
+	}
+	cliAnalytics.GetInstrumentation().SetTargetId(targetId)
+
+	if cliAnalytics.GetInstrumentation().GetDuration() == 0 {
+		cliAnalytics.GetInstrumentation().SetDuration(time.Since(startTime))
+	}
+
+	addRuntimeDetails(cliAnalytics.GetInstrumentation(), ua)
+	addNetworkingDetails(cliAnalytics.GetInstrumentation(), globalConfiguration)
+
+	cliAnalytics.GetInstrumentation().AddExtension("exitcode", exitCode)
+	if exitCode == 2 {
+		cliAnalytics.GetInstrumentation().SetStatus(analytics.Failure)
+	}
+}

cliv2/cmd/cliv2/logheaderfooter.go

@@ -165,36 +165,54 @@ func writeLogHeader(config configuration.Configuration, networkAccess networking
 	}
 }
 
-func writeLogFooter(exitCode int, errs []error) {
+func writeLogFooter(exitCode int, errs []error, globalConfiguration configuration.Configuration, networkAccess networking.NetworkAccess) {
+	const maxLength = 100
+	globalLogger.Print("")
+	globalLogger.Printf("------------ Summary ------------")
+	// to make things easier to find, let's repeat the header before the footer
+	writeLogHeader(globalConfiguration, networkAccess)
+
 	// output error details
-	if exitCode > 1 && len(errs) > 0 {
-		ecErrs := formatErrorCatalogErrors(errs)
+	ecErrs := formatErrorCatalogErrors(errs)
+	if len(ecErrs) > 0 {
+		globalLogger.Print("")
+		globalLogger.Printf("------------ Errors ------------")
 
-		for i, err := range ecErrs {
-			tablePrint(fmt.Sprintf("Error (%d)", i), fmt.Sprintf("%s (%s)", err.ErrorCode, err.Title))
-			tablePrint("  Type", err.Type)
-			tablePrint("  Classification", err.Classification)
+		for _, err := range ecErrs {
+			tablePrint(strings.ToUpper(err.Level), fmt.Sprintf("%s (%s)", err.Title, err.ErrorCode))
 
+			description := err.Description
 			// description
-			if _, ok := err.Meta["description"]; ok && len(err.Description) == 0 {
-				tablePrint("  Description", err.Meta["description"].(string))
+			if _, ok := err.Meta["description"]; ok && len(description) == 0 {
+				tmp, ok := err.Meta["description"].(string)
+				if ok {
+					description = tmp
+				}
 			}
-			tablePrint("  Description", err.Description)
 
-			// details
-			_, hasDetails := err.Meta["details"]
-			if hasDetails && len(err.Meta["details"].([]string)) > 0 {
-				tablePrint("  Details", "")
-				for i, details := range utils.Dedupe(err.Meta["details"].([]string)) {
-					tablePrint(fmt.Sprintf("    %d", i), details)
-				}
+			if len(description) > 0 {
+				globalLogger.Print("  Description:")
+				tablePrintMaxLength("", description, maxLength)
 			}
 
 			// links
+			err.Links = append(err.Links, err.Type)
 			if len(err.Links) > 0 {
 				tablePrint("  Links", "")
-				for i, link := range err.Links {
-					tablePrint(fmt.Sprintf("    %d", i), link)
+				for _, link := range err.Links {
+					tablePrint("", link)
+				}
+			}
+
+			globalLogger.Print("")
+
+			// details
+			_, hasDetails := err.Meta["details"]
+			if hasDetails && len(err.Meta["details"].([]string)) > 0 {
+				for i, details := range utils.Dedupe(err.Meta["details"].([]string)) {
+					globalLogger.Printf("  Instance %d:", i+1)
+					tablePrintMaxLength("", details, maxLength)
+					globalLogger.Print("")
 				}
 			}
 
@@ -205,13 +223,34 @@ func writeLogFooter(exitCode int, errs []error) {
 				for i, request := range err.Meta["requests"].([]string) {
 					tablePrint(fmt.Sprintf("    %d", i), request)
 				}
+				globalLogger.Print("")
 			}
 		}
+	} else {
+		globalLogger.Print("")
 	}
-	tablePrint("Interaction", interactionId)
+
 	tablePrint("Exit Code", strconv.Itoa(exitCode))
 }
 
+func tablePrintMaxLength(name string, value string, maxLength int) {
+	for _, inputLine := range strings.Split(value, "\n") {
+		tmp := inputLine
+		for {
+			line := tmp
+			if len(tmp) > maxLength {
+				line = tmp[:maxLength]
+			}
+			tmp = tmp[len(line):]
+			tablePrint("", strings.TrimSpace(line))
+
+			if len(tmp) == 0 {
+				break
+			}
+		}
+	}
+}
+
 func formatErrorCatalogErrors(errs []error) []snyk_errors.Error {
 	var formattedErrs []snyk_errors.Error
 

cliv2/cmd/cliv2/main.go

@@ -33,6 +33,8 @@ import (
 	"github.com/spf13/cobra"
 	"github.com/spf13/pflag"
 
+	"github.com/snyk/cli/cliv2/internal/cliv2"
+	"github.com/snyk/cli/cliv2/internal/constants"
 	cliv2utils "github.com/snyk/cli/cliv2/internal/utils"
 
 	localworkflows "github.com/snyk/go-application-framework/pkg/local_workflows"
@@ -42,8 +44,6 @@ import (
 	workflows "github.com/snyk/go-application-framework/pkg/local_workflows/connectivity_check_extension"
 	"github.com/snyk/go-application-framework/pkg/local_workflows/content_type"
 
-	"github.com/snyk/cli/cliv2/internal/cliv2"
-	"github.com/snyk/cli/cliv2/internal/constants"
 	ignoreworkflow "github.com/snyk/go-application-framework/pkg/local_workflows/ignore_workflow"
 	"github.com/snyk/go-application-framework/pkg/local_workflows/json_schemas"
 	"github.com/snyk/go-application-framework/pkg/local_workflows/output_workflow"
@@ -95,8 +95,7 @@ const (
 )
 
 func main() {
-	errorCode, errs := MainWithErrorCode()
-	writeLogFooter(errorCode, errs)
+	errorCode := MainWithErrorCode()
 	os.Exit(errorCode)
 }
 
@@ -520,7 +519,7 @@ func displayError(err error, userInterface ui.UserInterface, config configuratio
 	}
 }
 
-func MainWithErrorCode() (int, []error) {
+func MainWithErrorCode() int {
 	initDebugBuild()
 
 	errorList := []error{}
@@ -612,7 +611,7 @@ func MainWithErrorCode() (int, []error) {
 
 	if err != nil {
 		globalLogger.Print("Failed to init Workflow Engine!", err)
-		return constants.SNYK_EXIT_CODE_ERROR, errorList
+		return constants.SNYK_EXIT_CODE_ERROR
 	}
 
 	// init context
@@ -674,23 +673,7 @@ func MainWithErrorCode() (int, []error) {
 	exitCode := cliv2.DeriveExitCode(err)
 	globalLogger.Printf("Deriving Exit Code %d (cause: %v)", exitCode, err)
 
-	targetId, targetIdError := instrumentation.GetTargetId(globalConfiguration.GetString(configuration.INPUT_DIRECTORY), instrumentation.AutoDetectedTargetId, instrumentation.WithConfiguredRepository(globalConfiguration))
-	if targetIdError != nil {
-		globalLogger.Printf("Failed to derive target id, %v", targetIdError)
-	}
-	cliAnalytics.GetInstrumentation().SetTargetId(targetId)
-
-	if cliAnalytics.GetInstrumentation().GetDuration() == 0 {
-		cliAnalytics.GetInstrumentation().SetDuration(time.Since(startTime))
-	}
-
-	addRuntimeDetails(cliAnalytics.GetInstrumentation(), ua)
-	addNetworkingDetails(cliAnalytics.GetInstrumentation(), globalConfiguration)
-
-	cliAnalytics.GetInstrumentation().AddExtension("exitcode", exitCode)
-	if exitCode == 2 {
-		cliAnalytics.GetInstrumentation().SetStatus(analytics.Failure)
-	}
+	updateInstrumentationDataBeforeSending(cliAnalytics, startTime, ua, exitCode)
 
 	if !globalConfiguration.GetBool(configuration.ANALYTICS_DISABLED) {
 		sendAnalytics(cliAnalytics, globalLogger)
@@ -704,7 +687,11 @@ func MainWithErrorCode() (int, []error) {
 		globalLogger.Printf("Failed to cleanup %v", err)
 	}
 
-	return exitCode, errorList
+	if debugEnabled {
+		writeLogFooter(exitCode, errorList, globalConfiguration, networkAccess)
+	}
+
+	return exitCode
 }
 
 func legacyCLITerminated(err error, errorList []error) error {

cliv2/cmd/cliv2/main_test.go

@@ -45,7 +45,7 @@ func Test_MainWithErrorCode(t *testing.T) {
 	os.Args = []string{"snyk", "--version"}
 	defer func() { os.Args = oldArgs }()
 
-	errCode, _ := MainWithErrorCode()
+	errCode := MainWithErrorCode()
 	assert.False(t, globalConfiguration.GetBool(configuration.CONFIG_CACHE_DISABLED))
 	assert.Equal(t, configuration.NoCacheExpiration, globalConfiguration.GetDuration(configuration.CONFIG_CACHE_TTL))
 
@@ -60,18 +60,8 @@ func Test_MainWithErrorCode(t *testing.T) {
 			os.Args = oldArgs
 		}()
 
-		errCode, errs := MainWithErrorCode()
+		errCode := MainWithErrorCode()
 		assert.Equal(t, 2, errCode)
-
-		unauthorizedErrorCode := "SNYK-0005"
-		var actualErrorCodes []string
-		for _, err := range errs {
-			var snykError snyk_errors.Error
-			if errors.As(err, &snykError) {
-				actualErrorCodes = append(actualErrorCodes, snykError.ErrorCode)
-			}
-		}
-		assert.Contains(t, actualErrorCodes, unauthorizedErrorCode)
 	})
 }
 

cliv2/go.mod

@@ -17,11 +17,11 @@ require (
 	github.com/snyk/cli-extension-os-flows v0.0.0-20250915102829-6a59c2ef7e88
 	github.com/snyk/cli-extension-sbom v0.0.0-20250801142135-ae472dafa4cd
 	github.com/snyk/container-cli v0.0.0-20250321132345-1e2e01681dd7
-	github.com/snyk/error-catalog-golang-public v0.0.0-20250912144134-a308b7983895
-	github.com/snyk/go-application-framework v0.0.0-20251001122929-9233509171af
+	github.com/snyk/error-catalog-golang-public v0.0.0-20251006093240-2d9cc5458485
+	github.com/snyk/go-application-framework v0.0.0-20251006124522-e128dc93338d
 	github.com/snyk/go-httpauth v0.0.0-20240307114523-1f5ea3f55c65
 	github.com/snyk/snyk-iac-capture v0.6.5
-	github.com/snyk/snyk-ls v0.0.0-20250930080011-490a08b5db19
+	github.com/snyk/snyk-ls v0.0.0-20251007104647-18cf38d2c118
 	github.com/spf13/cobra v1.9.1
 	github.com/spf13/pflag v1.0.6
 	github.com/stretchr/testify v1.10.0