Tools
cli
snyk/cli
The Snyk CLI scans projects for vulnerabilities across open-source dependencies, application code, container images, and infrastructure-as-code. Developers run it locally, in an IDE, or in CI/CD pipelines to find and fix security issues.
Topics
Related projects
oss-fuzz12.9kGoogle's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.- clusterfuzz5.6kA scalable fuzzing infrastructure from Google that runs multiple coverage-guided engines, deduplicates crashes, minimizes testcases, and files bugs automatically. It powers OSS-Fuzz and can be deployed on clusters of any size.
dependency-track4.4kA self-hosted software supply chain analysis platform that uses SBOMs to identify components and known vulnerabilities across projects, helping teams manage open-source dependency risk.
is-website-vulnerable2kis-website-vulnerable is a Node.js CLI that inspects a website's frontend JavaScript libraries and reports publicly known vulnerabilities, usable locally or in CI pipelines.
cve-bin-tool1.8kA command-line scanner that finds known CVEs in binaries and SBOMs by detecting bundled components, generating reports and integrating with CI pipelines.