Snyk

Testing Commands

Scan projects for known vulnerabilities in dependencies, containers, and infrastructure code.

12 commands

Pro Tips

Use --severity-threshold=high to focus on critical issues

Run snyk test in CI to block vulnerable dependencies

Commands

Test project

$ snyk test

Test current project for vulnerabilities.

Test with severity threshold

$ snyk test --severity-threshold=high

Only report high+ severity issues.

Test specific file

$ snyk test --file=package.json

Test specific manifest file.

JSON output

$ snyk test --json > results.json

Output results as JSON.

Test all projects

$ snyk test --all-projects

Test all projects in directory.

Test for specific org

$ snyk test --org=my-team

Run test against a specific Snyk organization.

Include dev dependencies

$ snyk test --dev

Include devDependencies in the scan.

Prune repeated subdeps

$ snyk test --prune-repeated-subdependencies

Remove duplicate sub-dependencies for cleaner results.

Custom policy path

$ snyk test --policy-path=.snyk

Use a custom .snyk policy file path.

Set detection depth

$ snyk test --detection-depth=3

Limit how deep to search for manifest files.

Fail on fixable only

$ snyk test --fail-on=upgradable

Only fail if there are upgradable vulnerabilities.

SARIF output

$ snyk test --sarif > results.sarif

Output results in SARIF format for CI integration.