Snyk

Snyk

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

68
Stars
12
Forks
20
Releases

Overview

The Snyk Language Server (Snyk-LS) is an implementation of the Language Server Protocol that integrates vulnerability scanning capabilities from Snyk into development environments. It uses the Snyk CLI as a data provider for Snyk Open Source (OSS) and Snyk Infrastructure as Code (IaC), while connecting directly to the Snyk Code API for Snyk Code analysis. The server follows LSP, offering diagnostics when a document is opened or folders are part of the workspace, performing folder startup scans, and enabling workspace scans on demand. Diagnostics are cached to improve performance and can be invalidated on document saves to retrieve fresh results. It provides precise range calculations to highlight issues, rich hover information with diagnostic details and links, and progress reporting for long-running background tasks. It supports in-editor actions such as Code Lenses and Code Actions, and handles authentication with OAuth2 or token-based methods, including browser opening and clipboard support. The server can automatically download and manage the Snyk CLI if not present, and supports selective activation of products. It communicates with clients via MCP extensions for folder config, server URL, and scan notifications.

Details

Owner
snyk
Language
Go
License
Apache License 2.0
Updated
2025-12-07

Features

Diagnostics delivery on open/scan

Snyk-LS sends diagnostics to the client when documents are opened and as folders are part of the workspace.

Folder startup scans and diagnostics

Performs a folder scan at startup and delivers diagnostics for results.

Workspace-wide scans on demand

Supports triggering a scan of all workspace folders via a command.

Diagnostics caching

Caches diagnostics and serves them until a new workspace scan or a save event.

Cache invalidation on save

Invalidates caches on document save and retrieves fresh diagnostics.

Precise range calculations

Calculates ranges to correctly highlight Snyk OSS issues in files.

Authentication support

Authentication with OAuth2 or tokens, including opening a browser and handling token retrieval.

In-editor actions (Lenses & Commands)

Code Lenses and Code Actions for navigating Snyk data and performing actions in-editor.

Audience

DevelopersIntegrates Snyk OSS, IaC, and Code analysis into the editor workflow to provide real-time vulnerability scanning and remediation guidance.

Tags

Snyk Open SourceSnyk Infrastructure as CodeSnyk CodeLanguage Server ProtocolLSPDiagnosticsCode ActionsCode LensesAuthenticationOAuth2CLI