Getting started with Snyk Open Source

Support API docs Product updates Sign up for free

Search…

Use Snyk Open Source to scan and fix vulnerabilities in your application's Open Source libraries, for a supported language and package manager, such as Java.
This process describes getting started using the Snyk Web UI with a Git-based source repository.
You can also use an IDE tool or a CI/CD integration. See Integrations.
You can also use Snyk Open Source from the CLI.
Prerequisites
Ensure you have:
​Created a Snyk account.
​Set up integration with your code repository on a supported system such as GitHub.
​Imported a Snyk Project for scanning​
See the Getting started section for more details.
View vulnerabilities
You can view vulnerability results for imported Projects. The Projects tab appears by default after import, showing vulnerability information for Snyk Projects you've imported, grouped into Targets.
You can expand a Target to see vulnerability information for Projects, including the number of issues found, grouped by severity level:
.
Click an entry to open the issues view for that entry, including the module where it was introduced, how to fix it, plus more details about the vulnerability itself.
See View Project information for more details.
Fix vulnerabilities
For some languages, Snyk can fix vulnerabilities using fix pull/merge requests.
See What languages do we support Fix Pull Requests or Merge Requests?​
Navigate to the Issues view for a project:
To fix vulnerabilities:
1.Click Fix this vulnerability to raise a fix PR for that issue (or click Fix these vulnerabilities to fix multiple issues).
2.The Open a Fix PR screen opens and indicates the selected vulnerabilities.
3.Check or uncheck the issues you want to fix or remove from this fix.
4.Scroll to the bottom of the screen and click Open a Fix PR.
5.Snyk acts on the PR and displays a results screen.
6.Optionally, select the Files changed tab to see details of the changes made.
See Fix your vulnerabilities for more details.

Snyk for Swift and Objective-C (CocoaPods)

Use Snyk Open Source from the CLI

Last modified 23d ago

Export as PDF

Copy link

Edit on GitHub

On this page

Prerequisites

View vulnerabilities

Fix vulnerabilities