The Snyk Visual Studio extension provides analysis of your code and open source dependencies.
Snyk scans for vulnerabilities and returns results with security issues categorized by issue type and severity.
For open source, you receive automated algorithm-based fix suggestions for both direct and transitive dependencies.
This single plugin provides a Java vulnerability scanner, a custom code vulnerability scanner, and an open-source security scanner.
Snyk scans for the following types of issues:
​Open Source Security - security vulnerabilities and license issues in both direct and indirect (transitive) open-source dependencies pulled into the Snyk Project.
See also the Open Source docs.
This page explains installation of the Visual Studio extension. After you complete the steps on this page, you will continue by following the instructions in the other Visual studio extension docs:
Supported languages, package managers, and frameworks
Supported languages and frameworks include C#, JavaScript, TypeScript, Java, Go , Ruby, Python, PHP, Scala, Swift, Objective-C, and .NET.
For Snyk Open Source: the Visual Studio extension supports all the languages and package managers supported by Snyk Open Source and the CLI. See the full list in the docs.
Supported versions of Visual Studio: 2015, 2017, 2019, 2022. The extension is compatible with Community, Professional, and Enterprise plans.
Install the extension
You can install the Snyk extension directly from the IDE; open Extensions > Manage Extensions.
Manage extensions menu
Search for Snyk and select Download to download the Snyk Security - Code and Open Source Dependencies extension.
Once installed, use Snyk through the Extensions > Snyk menu (on Visual Studio versions older than 2019, Snyk is part of the top menu bar).
You can also open the Snyk tool window using View > Other Windows > Snyk.
Once the tool window opens, wait while the Snyk extension downloads the latest Snyk CLI version.
Snyk tool window, CLI downloading
After you install the extension and the CLI you must authenticate. You can use the Connect Visual Studio to Snyk link. For more information and additional ways to authenticate see Visual Studio extension authentication.
Support and feedback
If you need help, submit a request to Snyk Support.
Snyk continuously strives to improve the Snyk plugins experience. If you would you like to share your feedback about the Snyk Visual Studio extension, schedule a meeting.