Open source alternatives to Snyk
Snyk is a commercial scanner for vulnerabilities in dependencies, containers and code.
5 projects
- trivyv0.76.2aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
39.4k starsApache-2.0GoDockerReleased 9 days ago - grypev0.121.3anchore/grype
A vulnerability scanner for container images and filesystems
13.3k starsApache-2.0GoDockerReleased 5 days ago - osv-scannerv2.7.1google/osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
11.5k starsApache-2.0GoDockerReleased 6 days ago - semgrepv1.185.0semgrep/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
17.7k starsLGPL-2.1CDockerReleased 5 days ago - dependency-track5.2.1DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
4.5k starsApache-2.0JavaReleased 21 days ago