Security scans for custom templates¶
Snowflake runs a security scan on custom templates every 30 minutes to identify Jinja code that is susceptible to a SQL injection attack.
Prerequisites¶
To enable the custom template security scan, you must log into the clean rooms UI for that account at least once.
The PRIVACY_AND_SECURITY_SCANNER task must be running.
To see if the task is running in the Tasks page in Snowsight:
In the navigation menu, select Transformation » Tasks.
View security scan results¶
Snowflake saves security scan results to the SAMOOHA_BY_SNOWFLAKE_LOCAL_DB.PUBLIC.TEMPLATE_SCANNER_RESULTS table in the provider’s Snowflake account. This table is present only if the previously listed prerequisites are satisfied.
To view results of security scans:
Sign in to Snowsight.
Use the database object explorer in Snowsight or a SQL query to view the security scan results:
In the navigation menu, select Catalog » Database Explorer.
Navigate to
SAMOOHA_BY_SNOWFLAKE_LOCAL_DB»PUBLIC»Tables»TEMPLATE_SCANNER_RESULTS.Select Data Preview.
In the navigation menu, select Projects » Worksheets.
Select + SQL Worksheet.
To list the results of the security scans, paste and run the following statement:
SELECT * FROM samooha_by_snowflake_local_db.public.template_scanner_results;