# 使用 Homebrew, Nix, winget 安装 snyk-cli

查看 snyk-cli 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:snyk-cli
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install snyk-cli
```

  证据: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#snyk
```

  证据: nixpkgs package indexes: pkgs/by-name/sn/snyk/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

### Windows

- winget (92%):

```sh
winget install --id Snyk.Snyk -e
```

  证据: Windows Package Manager source index: Snyk.Snyk from https://cdn.winget.microsoft.com/cache/source.msix

## 软件包事实

- **软件包键:** brew:snyk-cli
- **软件包管理器:** Homebrew
- **软件包管理器页面:** <https://formulae.brew.sh/formula/snyk-cli>
- **版本:** 1.1306.2
- **来源摘要:** Scans and monitors projects for security vulnerabilities
- **主页:** <https://snyk.io>
- **上游文档:** <https://snyk.io>
- **许可证:** Apache-2.0
- **源码归档:** <https://registry.npmjs.org/snyk/-/snyk-1.1306.2.tgz>
- **最后更新:** 2026-07-28T16:04:03Z
- **已生成:** 2026-08-04T22:13:35+00:00

## 可执行文件

- snyk (cli)
- snyk (别名)

## 依赖

- node

## 安装行为

- post-install 钩子: 未定义
- Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## 版本和新鲜度

- 页面生成时间: 2026-08-04
- 管理器版本: 1.1306.2
- 管理器更新时间: 2026-07-28
- 本地数据: OK
- 上游仓库: https://snyk.io
- 信息: Release/tag comparison is only available for GitHub repositories.
## 项目历史与用法

Snyk CLI is the `snyk` command-line client for bringing Snyk's vulnerability scanning and monitoring into local development, IDEs, and CI/CD pipelines. In package-manager culture it is a canonical security scanner package: install it globally, authenticate it, run it against dependency manifests, source code, container images, and IaC files, then wire it into automation.

### 项目历史

The public GitHub repository was created in 2015 and the official README describes the CLI as a developer-first, cloud-native security tool for scanning and monitoring software projects. Snyk's docs position it as the command-line entry point for Open Source, Code, Container, and IaC scanning.

The README records an important governance change on July 22, 2024: Snyk CLI stopped accepting external contributions while continuing development in public. It also says release channels were introduced in April 2024 as Snyk focused on stabilizing releases.

### 采用历史

Official installation docs list package managers such as npm, Homebrew, and Scoop, plus Docker and standalone binaries. The input records Homebrew, Nix, and WinGet packages, matching the CLI's role across macOS, Linux, Windows, and CI systems.

### 使用方式

Users authenticate a machine, then run commands such as `snyk test`, `snyk monitor`, `snyk code test`, `snyk container test`, and `snyk iac test`. The CLI detects supported project manifests, reports vulnerability paths and fix guidance, and can create monitored snapshots in Snyk's web UI.

### 为什么软件包爱好者会关心

Package nerds care because Snyk CLI sits directly on package-manager metadata: manifests, lockfiles, dependency graphs, container images, IaC files, global npm/Homebrew/Scoop installs, signed release assets, and machine-local credentials. It is a package that audits other packages.

### 时间线

- 2015: Public GitHub repository created.
- 2023: GitHub releases show the v1.1249 series in the public release stream.
- 2024: Release channels introduced in April, according to the README.
- 2024: External contributions closed on July 22, according to the README.
- 2026: GitHub releases show the v1.1305 series in the active release stream.

### Related projects

- Related Snyk tools include Snyk Open Source, Snyk Code, Snyk Container, Snyk IaC, Snyk IDE plugins, Snyk CI/CD integrations, and Snyk CLI extensions.

### 来源

- <https://docs.snyk.io/developer-tools/snyk-cli>
- <https://docs.snyk.io/developer-tools/snyk-cli/snyk-cli/install-the-snyk-cli>
- <https://docs.snyk.io/developer-tools/snyk-cli/snyk-cli/releases-and-channels-for-the-snyk-cli>
- <https://github.com/snyk/cli>
- <https://github.com/snyk/cli/releases>


## 安全说明

没有找到 snyk-cli 的匹配本地密钥处理 manifest。软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.config/configstore/snyk.json

## Credential files

- Unix: ~/.config/configstore/snyk.json
## 源数据库详情

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** snyk-cli
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## 其他软件包管理器记录

- Nix - snyk: installed executable or alias match | nixpkgs package indexes: pkgs/by-name/sn/snyk/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- winget - Snyk.Snyk: installed executable or alias match | Windows Package Manager source index: Snyk.Snyk from https://cdn.winget.microsoft.com/cache/source.msix


## 相关链接

- [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://pkg.so/zh-hans/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [Package ecosystem packages](https://pkg.so/zh-hans/package-ecosystem-tools/) - Matched package manager, installer, dependency, registry, or publishing metadata.
- [node](https://pkg.so/zh-hans/brew/node/) - Runtime dependency declared by Homebrew.
- [dependency-check](https://pkg.so/zh-hans/brew/dependency-check/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning.
- [govulncheck](https://pkg.so/zh-hans/brew/govulncheck/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning.
- [kics](https://pkg.so/zh-hans/brew/kics/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning.
- [terrascan](https://pkg.so/zh-hans/brew/terrascan/) - Shares pkgdb curated category or tags: cli, iac, security.
- [cargo-audit](https://pkg.so/zh-hans/brew/cargo-audit/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning.
- [pip-audit](https://pkg.so/zh-hans/brew/pip-audit/) - Shares pkgdb curated category or tags: cli, dependency-scanning, security, vulnerability-scanning.
- [clair](https://pkg.so/zh-hans/brew/clair/) - Shares pkgdb curated category or tags: cli, container-scanning, security, vulnerability-scanning.
- [flawfinder](https://pkg.so/zh-hans/brew/flawfinder/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning.
- [snyk](https://pkg.so/zh-hans/npm/snyk/) - Executable or command metadata overlaps with this package. Shared terms: cli, security, snyk.
- [wizcli](https://pkg.so/zh-hans/cask/wizcli/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, container, container-scanning, iac, scanning.

## Combined YAML source

View the package source record on GitHub. [combined/snyk-cli.yml](https://github.com/mxcl/pkgdb/blob/main/combined/snyk-cli.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
