Snyk/sast

@webframp/snyk/sastv2026.09.08.1· 2d agoMODELS

01README

Snyk SAST — static application security testing results and management

02Release Notes

2026.09.08.1

Added: Initial code-generated release of @webframp/snyk/sast with 8 methods covering the Snyk sast API surface.

03Models1

@webframp/snyk/sastv2026.09.08.1snyk/sast.ts

Global Arguments

Argument	Type	Required	Description
apiToken	string	yes	Snyk API token
groupId	string	yes	Snyk group ID
version	string	yes	Snyk API version date

fn list_sast_rule_extensions_by_group()

Get a list of all the SAST rule extensions for the requested Group

fn create_sast_rule_extension(data: unknown)

Create a SAST rule extension

Argument	Type	Required	Description
data	unknown	yes

fn create_sast_impact_test(data: unknown)

Trigger a SAST rule extension impact test.

Argument	Type	Required	Description
data	unknown	yes

fn get_sast_impact_test_status(test_id: string)

Retrieve the SAST rule extension impact test status.

Argument	Type	Required	Description
test_id	string	yes	Unique identifier for a test result

fn get_sast_impact_test_result(test_id: string)

Retrieve the impact test result for a SAST rule extension.

Argument	Type	Required	Description
test_id	string	yes	Unique identifier for a test result

fn get_sast_rule_extension(rule_extension_id: string)

Get a SAST rule extension by SAST rule extension ID

Argument	Type	Required	Description
rule_extension_id	string	yes	Unique identifier for SAST rule extension in request path

fn update_sast_rule_extension(rule_extension_id: string, data: unknown)

Update a SAST rule extension by SAST rule extension ID

Argument	Type	Required	Description
rule_extension_id	string	yes	Unique identifier for SAST rule extension in request path
data	unknown	yes

fn delete_sast_rule_extension(rule_extension_id: string)

Delete a SAST rule extension by SAST rule extension ID

Argument	Type	Required	Description
rule_extension_id	string	yes	Unique identifier for SAST rule extension in request path

Resources

sast_rule_extensions_by_group(infinite)— Get a list of all the SAST rule extensions for the requested Group

sast_rule_extension(infinite)— Create a SAST rule extension

sast_impact_test(infinite)— Trigger a SAST rule extension impact test.

sast_impact_test_status(infinite)— Retrieve the SAST rule extension impact test status.

sast_impact_test_result(infinite)— Retrieve the impact test result for a SAST rule extension.

04Previous Versions6

2026.08.28.2Aug 28, 2026

2026.08.28.2

Hardened codegen: instance names sanitized against path traversal; 429 rate-limit retry with Retry-After; string schema patterns emit regex validation; output schemas passthrough unknown fields.

2026.08.28.1Aug 28, 2026

2026.08.28.1

Changed: Normalized the extension license to Apache-2.0 and corrected the copyright holder to "Sean Escriva". Extensions that previously shipped an MIT LICENSE.md are now Apache-2.0, consistent with the repository root and every other extension. No code or behavioral changes.

Upgrade note: License text only. No API, schema, or runtime behavior changed.

2026.08.26.2

Fixed: Restored inline npm:zod@4.4.3 import specifiers so the registry quality scorer can resolve dependencies and score the extension. An earlier release used a bare "zod" import-map specifier, which published but scored as unscored.

Changed: Retained explicit compilerOptions.strict in deno.json. No behavioral or schema changes.

2026.08.26.2Aug 27, 2026

2026.08.26.2

Changed: Retained explicit compilerOptions.strict in deno.json. No behavioral or schema changes.

2026.08.24.1Aug 24, 2026

2026.08.24.1

Added: Output metadata attributes for observability.

durationMs: Method execution duration in milliseconds.
collectedBy: Extension name that produced the data.
fetchedAt: ISO 8601 timestamp when data was fetched (added to resources that previously lacked it).

2026.08.21.1Aug 22, 2026

2026.08.21.1

Changed: test_id and rule_extension_id now must be non-empty strings — previously an empty value passed schema validation and only failed deep inside the Snyk API call with a generic 404. Errors from the Snyk API now name the HTTP method and path that was attempted instead of just the bare status and body. Network-level failures (DNS, connection refused, TLS errors) reaching the Snyk API are now also caught and reported with the operation and path that was being attempted, rather than surfacing as an unhandled fetch exception.

2026.07.19.1Jul 20, 2026