Unofficial Visual Studio Code extension for Snyk.io
Check your Node.JS and Ruby dependencies against Snyk.io vulnerability database.
Note: This extension requires internet access to https://snyk.io/vuln/ and will not currently work offline.
This extension adds the Snyk Test
command to check your package.json
, npm-shrinkwrap
, or Gemfile
against the Snyk.io VulnDB inventory of known vulnerabilities.
In the command palette (CMD + SHIFT + P), type Snyk Test
.
- If vulnerabilities are found, display an error with a count of vulnerable dependencies
- If no vulnerabilities are found, display an info message
- Detailed summary of vulnerable dependencies
- Hyperlinked URLs directly to Snyk.io VulnDB for more information on remediation.
See CHANGELOG.md.