Scanning Snaps for Vulnerabilities

Hello, friends!

I built something that might be of interest to you, using Syft and Grype. It scans snaps for vulnerabilities. It’s called SnapScope, and you can see it at:

It scans any snap package you specify that is publicly available on the Snap Store. Each publisher has a page where you can view previously scanned snaps, results, and the queue of snaps waiting to be checked.

I made a 5-minute video to show you around:

Feedback and suggestions welcome!

2 Likes