TL;DR

Integrate your Snyk application security platform by leveraging webhooks into various other external systems such as Microsoft Teams, Azure DevOps Boards, New Relic, DataDog and Splunk.

Here are all the necessary links to get started:

• GitHub Repository: https://github.com/harrykimpel/snyk-webhook-subscription
• Microsoft Teams: https://github.com/harrykimpel/snyk-webhook-subscription/blob/main/azure-function-microsoft-teams.cs
• Azure DevOps Boards: https://github.com/harrykimpel/snyk-webhook-subscription/blob/main/azure-function-azure-boards.cs
• New Relic: https://github.com/harrykimpel/snyk-webhook-subscription/blob/main/azure-function-newrelic.cs
• DataDog: https://github.com/harrykimpel/snyk-webhook-subscription/blob/main/azure-function-datadog.cs
• Splunk: https://github.com/harrykimpel/snyk-webhook-subscription/blob/main/azure-function-splunk.cs

Background

In the past few weeks I have been quite busy in my spare time to think about new ways of integrating the Snyk application security platform with various other systems and especially also observability platforms. These ideas are typically triggered through customer interactions, their questions or requirements. Due to my nature and passion, I typically don’t just think about potential integrations and architectures, but really can’t help but also implement a quick prototype. That is what I am passionate about.

TL;DR

Leverage a Prometheus Exporter to send all your application security vulnerabilities from Snyk into Splunk.

Here are all the necessary links to get started:

• Snyk Exporter: https://github.com/lunarway/snyk_exporter
• Splunk OpenTelemetry Collector for Kubernetes: https://docs.splunk.com/Observability/gdi/opentelemetry/install-k8s.html#otel-install-k8s

Update (2022-09-22)

The option that I am describing here is just one way to achieve this. There might even be a more straight forward option available that I started to describe in a more recent post. Please find an additional approach in my post Snyk Integration Capabilities with WebHooks - some examples.

It was back in 2019 at Microsoft Ignite in Orlando when I discovered a new project referred to as Distributed Application Runtime, or Dapr for short. This immediately caught my attention and Mark Russinovich did an amazing job presenting this to the audience.

Dapr is quite an interesting project for me in many ways. First of all, software architecture is near and dear to my heart and Dapr solves a lot of the challenges developers typically face when designing and implementing applications. Its portable, event-driven runtime makes it easy for developers to build resilient, stateless and stateful microservices applications that run on the cloud or edge and embraces the diversity of languages and developer frameworks.

How-To: Set-up New Relic to collect and observe metrics, traces and logs from Dapr and the underlying applications.

Enable Dapr metrics and logs with New Relic Kubernetes integration for Azure Kubernetes Service (AKS) and application traces using OpenTelemetry.

Prerequisites

• Azure Kubernetes Service
• kubectl
• An installation of Dapr on Kubernetes
• Perpetually free New Relic account, 100 GB/month of free data ingest, 1 free full access user, unlimited free basic users

Enable New Relic Kubernetes integration

The Kubernetes integration monitors worker nodes. In Azure Kubernetes Service, master nodes are managed by Azure and abstracted from the Kubernetes platforms.

As a side project, I recently worked on creating a mobile app for Android (and iOS to be completed). To be honest, the development effort was quite straight forward. The development stack focused on Xamarin, because I do not know a thing about creating a native app for Android nor iOS. But, I do know C# … so, for me this was a natural choice :-)

My knowledge in the area of Xamarin was quite limited and I did not create an app for Android or iOS before. However, the path from idea to prototyping was really smooth. There are a ton of kickstart packages out there and the documentation is amazing. You’ll find tons of articles, knowledge base and other posts that are really helpful.

Background and Basics

In a recent project engagement, we were assigned the job to migrate a COBOL-based mainframe application to a new environment. The core theme specifically for this project follows a re-hosting approach. The reasoning for this type of approach is agreed upon with the customer mainly due to time and cost.

Of course, the scope and effort for such a transformation is quite huge and there are many tasks involved for the complete application to run on a completely different platform. Some of the activities include:

I have been using Windows 10 for quite a while now … actually from the very first moment Microsoft released their first public preview late in 2014. I absolutely like the look and feel and how the user experience evolved from Windows 8.1. I think it is a much more intuitive way to use your computer for work and play. I am using it on a tablet and it works great with touch, but also mouse and keyboard.

Today I decided to upgrade my home computer to Windows 8 Pro. One thing you have to know is that this is a very critical system for us at home. It runs the entertainment system and most importantly feeds our TV system (XBox 360) in the living room. I was specifically nervous about the fact that the TV signal for the Media Center comes from a powerline connected devolo dLAN TV Sat PC device (that actually sits on the top floor of our house). Not much Windows 8 support information was given by devolo, but the Windows 8 upgrade assistant did say that there was a newer Version of the driver available (also I couldn’t find any Information on the web).

Finally, the long awaited Skype app for Windows Phone is here. This information has been announced today during Mobile World Congress in Barcelona. Please find a blog post here (original URL https://windowsteamblog.com/windows_phone/b/windowsphone/archive/2012/02/27/windows-phone-at-mobile-world-congress-2012.aspx). Just in case the Zune link does not work, please try it via marketplace (original URL https://www.windowsphone.com/en-GB/apps/c3f8e570-68b3-4d6a-bdbb-c0a3f4360a51) … this worked for me!

Within my SharePoint 2010 environment, I have created my own Managed Metadata Service including a specific term hierarchy. After doing so, I wanted to use these terms as a managed metadata column in a custom list. I was able to create new list items leaving the newly created metadata field empty. But, as soon as I started typing in the metadata field, the system prompted me with appropriate synonyms of the matching terms. However, when I tried to save the new item, I got an error message saying “Access Denied”.

For all you Java developers out there, have a look at this link in order to learn more about C# and the .NET framework.

I am totally excited about my new home entertainment system. It uses a standard digital satellite dish along with an external FireDTV (Digital Everywhere) digital TV receiver connected to my more or less frumpy desktop PC. The computer runs Windows 7 RC with Media Center configured to use the satellite box.

My living room is equipped with a Xbox 360 connected to the TV. The Xbox 360 and my desktop PC talk to each other via powerline AV ethernet connection (since I totally forgot to put a system of conduits in my home).

… or rather: good things come to those who wait.

Yesterday, I planned to install Visual Studio 2008 on a Vista machine. Sounds like not much of a challenge, but the problem was that I previously installed VS 2008 Beta2. I knew that there might be things to consider, so I followed Scott Guthrie’s blog post where he describes all necessary steps to uninstall VS 2008 Beta2 before installing the VS 2008 Final Release. During uninstall everything went just fine. So, I started VS 2008 setup. It first installed .NET Framework 3.5 which seemed to be okay. But then suddenly the setup stopped without any reason or error message.

I just found a solution to the issue in the subject. I had the problem a while ago and the only resolution was to re-install my machine. Today I had the same issue again after installing (what I figured out) an UMTS software on my machine. ASP.NET and IIS worked just fine before, but after installing the UMTS software this morning I had the same problems again. I googled and fortunately found this post. The resolution is just to run the little application attached. This will remove the bmnet.dll installed and will fix settings within the windows socket layer. It worked for me.

One thing that quite frequently happened to me: I worked with MS SQL Server Reporting Services for quite a while, due to some reason (that I cannot assign right now) while accessing the ReportManager I get the following error message “Failed to decrypt symmetric key”. The suggestion now is to run RsKeyMgmt to delete all encrypted content and to run RsConfig to re-generate a new key. However, when running RsKeyMgmt on my machine running a German version of Windows XP I get the following: After I type in J and click on ENTER nothing happens. It just doesn’t do anything. I googled for solutions but just couldn’t find anything. The only way to get RS back to work was to reinstall it. This happened quite a few times to me until I found this post (original link: https://www.developmentnow.com/g/115_2005_1_0_0_454625/rskeymgmt-gives-no-response.htm) from Brian Welcker. So, the simple solution to this is to type in Y instead.