Snyk Supports Google Cloud's Gemini Code Assist
April 17, 2024

Snyk announced the expansion of its current partnership with Google Cloud to advance secure code generated by Google Cloud’s generative-AI-powered collaborator service, Gemini Code Assist.

By using Snyk’s solutions alongside Gemini Code Assist, customers can incorporate AI-driven code creation to develop secure applications faster.

Snyk Code, static application security testing (SAST) built by and for developers, can now be integrated with Gemini Code Assist to provide global developer and security teams with even greater trust in the code they’re generating – both by human developers as well as AI. Snyk Code helps to ensure the security of AI-assisted coding without interfering with the enhanced productivity Gemini Code Assist provides. Security teams that use Snyk can also confidently use its security capabilities alongside Code Assist.

"The recent explosion of generative AI solutions has already revolutionized modern software development, with the promise of further accelerating software innovation worldwide,” said Danny Allan, Chief Technology Officer, Snyk. “We’re excited to deepen our relationship with Google Cloud with this latest milestone – together, we understand the crucial importance of secure application development and we look forward to helping more enterprises worldwide to continue their pace of innovation securely.”

Other key highlights of Snyk’s support for Gemini Code Assist include:

- Security at the Speed of AI: To maintain developer speed and agility, Snyk’s DeepCode AI scans code within seconds rather than hours, analyzing source code directly and performing multi-file, interfile and data flow analysis in real time for fast and accurate results within the integrated development environment (IDE). Based on both AI as well as human security experts, DeepCode AI finds and learns new vulnerabilities and insecure coding patterns.

- Better together: Developers can set up Snyk in just a few clicks by navigating to the release notes within Google Cloud’s IDE extension for VSCode or IntelliJ. Snyk’s DeepCode AI will test all code written in the IDE, whether that code was written by human developers or an AI coding assistant such as Gemini Code Assist. Developers have access to actionable remediation advice in-line with their code to help them fix security vulnerabilities in near real-time.

- Contextual Information on Snyk Usage: Snyk will help to further train Gemini Code Assist on its security scanning products and vulnerability database to help improve how developers find and fix common vulnerabilities. Users will be able to request best practices on how to bring Snyk into existing development environments and workflows, which can help them set up and operationalize Snyk’s tools faster.

- Deep Integration: Later this year, Gemini Code Assist will integrate deeply with Snyk leveraging Snyk’s platform to scan the developers code to help developers find, understand and fix vulnerabilities faster right from the Gemini Code Assist Extension

“Our AI-powered software development assistant allows developers to build software with higher velocity, quality and security,” said Gabe Monroy, VP, Developer Experience, Google Cloud. “With our upcoming integration of Snyk scanning capabilities into Gemini Code Assist, developers will be able to build secure applications, while seamlessly identifying and fixing vulnerabilities without leaving the IDE.”

Share this

Industry News

May 16, 2024

Pegasystems announced the general availability of Pega Infinity ’24.1™.

May 16, 2024

Mend.io and Sysdig unveiled a joint solution to help developers, DevOps, and security teams accelerate secure software delivery from development to deployment.

May 16, 2024

GitLab announced new innovations in GitLab 17 to streamline how organizations build, test, secure, and deploy software.

May 16, 2024

Kobiton announced the beta release of mobile test management, a new feature within its test automation platform.

May 15, 2024

Gearset announced its new CI/CD solution, Long Term Projects in Pipelines.

May 15, 2024

Rafay Systems has extended the capabilities of its enterprise PaaS for modern infrastructure to support graphics processing unit- (GPU-) based workloads.

May 15, 2024

NodeScript, a free, low-code developer environment for workflow automation and API integration, is released by UBIO.

May 14, 2024

IBM announced IBM Test Accelerator for Z, a solution designed to revolutionize testing on IBM Z, a tool that expedites the shift-left approach, fostering smooth collaboration between z/OS developers and testers.

May 14, 2024

StreamNative launched Ursa, a Kafka-compatible data streaming engine built on top of lakehouse storage.

May 14, 2024

GitKraken acquired code health innovator, CodeSee.

May 13, 2024

ServiceNow introduced a new no‑code development studio and new automation capabilities to accelerate and scale digital transformation across the enterprise.

May 13, 2024

Security Innovation has added new skills assessments to its Base Camp training platform for software security training.

May 13, 2024

CAST introduced CAST Highlight Extensions Marketplace — an integrated marketplace for the software intelligence product where users can effortlessly browse and download a diverse range of extensions and plugins.

May 09, 2024

Red Hat and Elastic announced an expanded collaboration to deliver next-generation search experiences supporting retrieval augmented generation (RAG) patterns using Elasticsearch as a preferred vector database solution integrated on Red Hat OpenShift AI.

May 09, 2024

Traceable AI announced an Early Access Program for its new Generative AI API Security capabilities.