Scan open-source libraries and licenses
You can scan your open-source libraries using Snyk Open Source:
In the Snyk Web UI
With your IDE
With a CI/CD integration
Through the Snyk CLI
Through Snyk API
Prerequisites for using Snyk Open Source in the Web UI
Before scanning your open-source libraries with Snyk Open Source, ensure you have completed the quickstart steps.
View vulnerabilities in your open-source libraries
You can view vulnerability results for imported Projects. The Projects page appears by default after import, showing vulnerability information for the Snyk Projects you have imported, grouped into Targets, that is, the repositories you have scanned.
You can expand a Target to see vulnerability information for Projects, including the number of issues found, grouped by severity level:
Click a Project to open the issues page for that Project, where you will see the issue cards, showing the module where each issue was introduced, how to fix it, and more details about the vulnerability itself.
For more details, see View Project information.
Fix vulnerabilities in your open-source libraries
For some languages, Snyk can fix vulnerabilities using fix pull/merge requests. For more information, see Automatic and manual PRs with Snyk Open Source.
Navigate to the Issues card for a Project:
To fix vulnerabilities:
Click Fix this vulnerability to open a fix PR for this issue; click Fix these vulnerabilities to fix multiple issues.
The Open a Fix PR screen opens, displaying the selected vulnerabilities.
Check or uncheck the issues you want to fix or remove from this fix.
Scroll to the bottom of the screen and click Open a Fix PR.
Snyk acts on the PR and displays a results screen.
Optionally, select the Files changed tab to see details of the changes made.
For more details, see Fix your vulnerabilities.
Last updated
