Scan open-source libraries and licenses
Last updated
Last updated
More information
Snyk privacy policy© 2024 Snyk Limited | All product and company names and logos are trademarks of their respective owners.
You can scan your open-source libraries using Snyk Open Source:
In the Snyk Web UI
With your IDE
With a CI/CD integration
Through the Snyk CLI
Through the Snyk API
Before scanning your open-source libraries with Snyk Open Source, ensure you have completed the steps in Getting started.
You can view vulnerability results for imported Projects. The Projects page appears by default after import, showing vulnerability information for the Snyk Projects you have imported, grouped into Targets, that is, the repositories you have scanned.
You can expand a Target to see vulnerability information for Projects, including the number of issues found, grouped by severity level:
Click a Project to open the issues page for that Project, where you will see the issue cards, showing the module where each issue was introduced, how to fix it, and more details about the vulnerability itself.
For more details, see View Project information.
For some languages, Snyk can fix vulnerabilities using fix pull/merge requests. For more information, see Automatic and manual PRs with Snyk Open Source.
Navigate to the Issues card for a Project:
To fix vulnerabilities:
Click Fix this vulnerability to open a fix PR for this issue; click Fix these vulnerabilities to fix multiple issues.
The Open a Fix PR screen opens, displaying the selected vulnerabilities.
Check or uncheck the issues you want to fix or remove from this fix.
Scroll to the bottom of the screen and click Open a Fix PR.
Snyk acts on the PR and displays a results screen.
Optionally, select the Files changed tab to see details of the changes made.
For more details, see Fix your vulnerabilities.
