Snyk의 오픈소스 대체

Scanner for vulnerabilities and misconfigurations — Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

↔ 대체: Snyk、Prisma Cloud、Aqua Security

Scans IaC and packages for misconfigurations — Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

↔ 대체: Snyk

Kubernetes-native continuous security scanner — Kubernetes-native security toolkit

↔ 대체: Snyk、Aqua Security

Scan project dependencies for known security vulnerabilities — An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

↔ 대체: Snyk、Black Duck、Mend

Block malicious npm and PyPI packages during install — Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

↔ 대체: Snyk、Socket

Docker security scanner — The Most Comprehensive Docker Security Scanner

↔ 대체: Snyk、Aqua Security

Scan Node projects for known package vulnerabilities — node security platform command-line tool

↔ 대체: Snyk

Scan codebase dependencies for licenses and vulns — Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems.

↔ 대체: Snyk

Dependency vulnerability scanner for builds and PRs — LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

↔ 대체: Snyk

Audit Python packages for known vulnerabilities — Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

↔ 대체: Snyk

CLI scanner for project security vulnerabilities — Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

↔ 대체: Snyk、Checkmarx、Veracode

Scan dependencies for vulnerabilities and licenses — OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

↔ 대체: Snyk

Open source software supply chain security scanner — OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

↔ 대체: Snyk、Black Duck