# Scanning Snaps for Vulnerabilities

**URL:** <https://anchorecommunity.discourse.group/t/scanning-snaps-for-vulnerabilities/588>\
**Category:** General\
**Created:** [December 12, 2025, 6:40pm UTC](https://anchorecommunity.discourse.group/t/scanning-snaps-for-vulnerabilities/588 "2025-12-12T18:40:21Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [December 12, 2025, 6:40pm UTC](https://anchorecommunity.discourse.group/t/scanning-snaps-for-vulnerabilities/588/1 "2025-12-12T18:40:22Z")

</div>

Hello, friends!

I built something that might be of interest to you, using Syft and Grype. It scans snaps for vulnerabilities. It’s called SnapScope, and you can see it at:

> **[SnapScope - Snap Package Security Scanner](https://snapscope.popey.com/)**
>
> Security microscope for the snap ecosystem. Search for any snap package, see its security posture, and dig into the CVEs.

 ![snapscope](https://global.discourse-cdn.com/free1/uploads/anchorecommunity/original/1X/0b662b3e965448dfa697ce827bea5cbb689d8ee1.png)

It scans any snap package you specify that is publicly available on the Snap Store. Each publisher has a page where you can view previously scanned snaps, results, and the queue of snaps waiting to be checked.

 ![firefox](https://global.discourse-cdn.com/free1/uploads/anchorecommunity/original/1X/8cbc521a0c6eb72da5f8ec3987e2d2fec688c5cb.png)

I made a 5-minute video to show you around:

[![](https://global.discourse-cdn.com/free1/uploads/anchorecommunity/original/1X/8651f5c519b4b3c8f151d86f65f564c1740c75ac.jpeg "SnapScope - Vuln Scanning Snap Packages") ](https://www.youtube.com/watch?v=-hB2Z2xI5vY)

Feedback and suggestions welcome!