Top 8 Snyk Open-Source Projects

cli

53 4,762 9.5 TypeScript

Snyk CLI scans and monitors your projects for security vulnerabilities. (by snyk)

Project mention: Best coding practices: secure dependency management | dev.to | 2024-04-03

Scan your projects for vulnerabilities regularly More development platforms add features to check if the dependencies of your application contain a vulnerable packages. In modern ASP.NET you can use dotnet list package --vulnerable and in NPM you can use npm audit. It's even better to automatically scan your dependencies regularly. You can use tools like snyk or mend.io (formerly Whitesource) to help you with that. Those tools are expensive but have some advanced features.

actions

3 477 5.2 HTML

A set of GitHub actions for checking your projects for vulnerabilities (by snyk)

Project mention: 8 tips for securing your CI/CD pipeline with Snyk | dev.to | 2023-07-21

This example used the snyk/actions/setup action, which allows you to run the Snyk CLI scanner from a shell command and will work for most use cases. There are, however, dozens of other versions of the action tailored to specific languages. Build tools and use cases along with their usage instructions in this GitHub repo: https://github.com/snyk/actions

SurveyJS

surveyjs.io sponsored

Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
vulnerablecode

2 469 8.8 Python

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
parlay

1 93 8.1 Go

Enrich SBOMs with data from third party services

Project mention: Parlay | /r/devopspro | 2023-06-12

vimp

1 54 8.5 Go

Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures. (by mchmarny)
nodejs-lockfile-parser

1 54 5.9 TypeScript

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
all-shields-cli

1 36 0.0 TypeScript

🦌 Tool to help automate your badges from dotfiles for your markdown.
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
100_Days_Of_Go

5 26 0.0 HCL

100 days of Go learning

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2024-04-03.