Notifications
Clear all
Snyk Reviews
1
Posts
1
Users
0
Reactions
0
Views
Topic starter
17/07/2026 12:50 am
Just migrated our team's CI from Snyk's GitHub Action to the CLI. The action's `--fail-on` flag was a bit too blunt for us, failing the build on any severity. We needed more control, like only failing on high/critical for app code, but any severity for dependencies.
Built a small Python wrapper to parse the JSON output and apply custom rules. It lets us set different severity thresholds per project type and even exclude certain low-risk license issues. Now it integrates cleanly into our GitLab CI pipelines. The main win is having a single, consistent failure policy across all our scans without managing multiple action configurations.