Snyk

Snyk is a developer security platform. It finds and fixes vulnerabilities in your code (SAST), open source dependencies (SCA), container images, and infrastructure as code (IaC).

When to Use

• Dependency Checking: "Does lodash have a vulnerability?" (SCA).
• Container Security: Scanning your Dockerfile base image for CVEs.
• IDE Integration: Real-time feedback in VS Code / IntelliJ while you code.

Quick Start

# Install CLI
npm install -g snyk

# Authenticate
snyk auth