Snyk CLI scans and monitors your projects for security vulnerabilities. - snyk/cli

June 26, 2026 - Find and automatically fix vulnerabilities in your code, open source dependencies, containers, and infrastructure as code. ... Snyk CLI scans and monitors your projects for security vulnerabilities.

A set of GitHub Action for using Snyk to check for vulnerabilities in your GitHub projects.

June 5, 2025 - Snyk offers a set of GitHub actions for using Snyk to check for vulnerabilities in your GitHub projects.

Analyze your code, dependencies, containers, and configurations free of charge and in seconds. Analysis is powered by Snyk’s industry-leading vulnerability database - the Snyk Intel Vulnerability Database and Snyk Code’s revolutionary scanning engine.

Snyk Vulnerability Scanner for IDEs based on the IntelliJ platform - snyk/snyk-intellij-plugin

SnykVulnCheck - Snyk Vulnerability Checking tool Tool for checking components from SBOM.json file (Software Bill of Material) against known vulnerabilities by using public API to Snyk Vulnerability DB (https://security.snyk.io/api) Tool is designed for running inside docker container or as an ordinary python script

2 weeks ago - Monitoring user activity on GitHub, including issues, PRs, and commit messages that may indicate a vulnerability. Bulk research, using tools that look for repeated security mistakes across open-source package code.

CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies - JLLeitschuh/snyk

November 12, 2020 - In this blog post, we’ll guide you through how to create a free Snyk account and test your open source dependencies for known vulnerabilities.

Find security vulnerabilities in open source npm packages while you code - snyk/vulncost

CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies - cybersecurity-team/snyk

Super vulnerable todo list application. Contribute to snyk-labs/nodejs-goof development by creating an account on GitHub.

Snyk alerts you if your projects are impacted by newly discovered vulnerabilities. Snyk seamlessly integrates with GitHub, Bitbucket, GitLab, and Azure Repos, making it easy to secure your repositories.

This is the vulnerability database used by Snyk, a tool that helps you find and fix known vulnerabilities in your Node.js dependencies, both ad hoc and as part of your CI (Build) system.

Evil Corp can now exploit the path traversal vulnerability to change the underline GitHub API call to leak files from any X private repository given they know the repository name and file path.

May 31, 2026 - Snyk is a developer security platform built for teams that want protection inside everyday engineering workflows. Instead of separating security review from build activity, Snyk places snyk code, snyk scan, and snyk vulnerability context close ...

Snyk helps you find, fix and monitor for known vulnerabilities in Node.js npm, Ruby and Java dependencies, both on an ad hoc basis and as part of your CI (Build) system.

June 6, 2024 - In that case, they can replace any script that gets executed in subsequent steps with a malicious version, modify a configuration file with command execution potential (e.g., package.json used by npm install), or exploit a command injection vulnerability within a step to execute arbitrary code. The extent of the damage depends on how the permissions are configured and whether there are any secrets that can be leaked to compromise additional services. Since the GITHUB_TOKEN's lifecycle is limited to the currently running workflow, an attacker must craft the exploit to run within that window.

A set of GitHub Action for using Snyk to check for vulnerabilities in your GitHub projects.